Team Foundation Server

CVEs (25)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-1306	Microsoft Team Foundation Server	Cri	0.65	9.8	0.17	Sep 11, 2019	A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.
CVE-2019-1072	Microsoft Team Foundation Server	Cri	0.65	9.8	0.12	Jul 15, 2019	A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
CVE-2018-8529	Microsoft Team Foundation Server	Cri	0.65	9.8	0.13	Nov 15, 2018	A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team.
CVE-2020-0758	Microsoft Azure DevOps Server	Hig	0.49	7.5	0.02	Mar 12, 2020	An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
CVE-2019-0971	Microsoft Team Foundation Server	Med	0.43	6.5	0.08	May 16, 2019	An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure…
CVE-2019-0647	Team Foundation Server Team Foundation Server	Med	0.43	6.5	0.05	Jan 17, 2019	An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.
CVE-2021-27067	Microsoft Team Foundation Server	Med	0.42	6.5	0.03	Apr 13, 2021	Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
CVE-2019-0871	Microsoft Team Foundation Server	Med	0.40	6.1	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0870	Microsoft Team Foundation Server	Med	0.40	6.1	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0868	Microsoft Team Foundation Server	Med	0.40	6.1	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0867	Microsoft Team Foundation Server	Med	0.40	6.1	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0866	Microsoft Team Foundation Server	Med	0.40	6.1	0.03	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867,…
CVE-2020-17145	Microsoft Azure DevOps Server	Med	0.35	5.4	0.01	Dec 10, 2020	Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-0700	Microsoft Azure DevOps Server	Med	0.35	5.4	0.01	Mar 12, 2020	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2019-1305	Microsoft Team Foundation Server	Med	0.35	5.4	0.02	Sep 11, 2019	A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
CVE-2019-1076	Microsoft Team Foundation Server	Med	0.35	5.4	0.02	Jul 15, 2019	A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
CVE-2019-0979	Microsoft Team Foundation Server	Med	0.35	5.4	0.02	May 16, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0872.
CVE-2019-0872	Microsoft Team Foundation Server	Med	0.35	5.4	0.02	May 16, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.
CVE-2019-0777	Microsoft Team Foundation Server	Med	0.35	5.4	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
CVE-2019-0743	Microsoft Team Foundation Server	Med	0.35	5.4	0.02	Mar 5, 2019	A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0742.

CVE-2019-1306CriSep 11, 2019
Microsoft
Team Foundation Server
risk 0.65cvss 9.8epss 0.17
A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.
CVE-2019-1072CriJul 15, 2019
Microsoft
Team Foundation Server
risk 0.65cvss 9.8epss 0.12
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
CVE-2018-8529CriNov 15, 2018
Microsoft
Team Foundation Server
risk 0.65cvss 9.8epss 0.13
A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team.
CVE-2020-0758HigMar 12, 2020
Microsoft
Azure DevOps Server
risk 0.49cvss 7.5epss 0.02
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
CVE-2019-0971MedMay 16, 2019
Microsoft
Team Foundation Server
risk 0.43cvss 6.5epss 0.08
An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure…
CVE-2019-0647MedJan 17, 2019
Team Foundation Server
Team Foundation Server
risk 0.43cvss 6.5epss 0.05
An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.
CVE-2021-27067MedApr 13, 2021
Microsoft
Team Foundation Server
risk 0.42cvss 6.5epss 0.03
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
CVE-2019-0871MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0870MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0868MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0867MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0866MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.03
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867,…
CVE-2020-17145MedDec 10, 2020
Microsoft
Azure DevOps Server
risk 0.35cvss 5.4epss 0.01
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-0700MedMar 12, 2020
Microsoft
Azure DevOps Server
risk 0.35cvss 5.4epss 0.01
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2019-1305MedSep 11, 2019
Microsoft
Team Foundation Server
risk 0.35cvss 5.4epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
CVE-2019-1076MedJul 15, 2019
Microsoft
Team Foundation Server
risk 0.35cvss 5.4epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
CVE-2019-0979MedMay 16, 2019
Microsoft
Team Foundation Server
risk 0.35cvss 5.4epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0872.
CVE-2019-0872MedMay 16, 2019
Microsoft
Team Foundation Server
risk 0.35cvss 5.4epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.
CVE-2019-0777MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.35cvss 5.4epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
CVE-2019-0743MedMar 5, 2019
Microsoft
Team Foundation Server
risk 0.35cvss 5.4epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0742.

Page 1 of 2