Azure Devops

CVEs (43)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-21512	Azure DevOps Server	Med	0.42	6.5	0.01	Feb 10, 2026	Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.
CVE-2023-21751	Microsoft Azure Devops Server	Med	0.42	6.5	0.01	Dec 14, 2023	Azure DevOps Server Spoofing Vulnerability
CVE-2021-27067	Microsoft Team Foundation Server	Med	0.42	6.5	0.03	Apr 13, 2021	Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
CVE-2020-17135	Microsoft Azure Devops Server	Med	0.42	6.4	0.01	Dec 10, 2020	Azure DevOps Server Spoofing Vulnerability
CVE-2019-0996	Microsoft Azure Devops Server	Med	0.42	6.5	0.02	Jun 12, 2019	A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery. An attacker who successfully exploited this vulnerability could bypass OAuth protections and register an application…
CVE-2023-36869	Microsoft Azure Devops Server	Med	0.41	6.3	0.01	Aug 8, 2023	Azure DevOps Server Spoofing Vulnerability
CVE-2021-28459	Microsoft Azure Devops Server	Med	0.40	6.1	0.02	Apr 13, 2021	Azure DevOps Server Spoofing Vulnerability
CVE-2020-1327	Microsoft Azure Devops Server	Med	0.40	6.1	0.02	Jun 9, 2020	A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
CVE-2019-0874	Microsoft Azure Devops Server	Med	0.40	6.1	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2019-0871	Microsoft Team Foundation Server	Med	0.40	6.1	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0870	Microsoft Team Foundation Server	Med	0.40	6.1	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0869	Microsoft Azure Devops Server	Med	0.40	6.1	0.02	Apr 9, 2019	A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
CVE-2019-0868	Microsoft Team Foundation Server	Med	0.40	6.1	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0867	Microsoft Team Foundation Server	Med	0.40	6.1	0.02	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0866	Microsoft Team Foundation Server	Med	0.40	6.1	0.03	Apr 9, 2019	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867,…
CVE-2023-21569	Microsoft Azure Devops Server	Med	0.36	5.5	0.01	Jun 14, 2023	Azure DevOps Server Spoofing Vulnerability
CVE-2020-17145	Microsoft Azure Devops Server	Med	0.35	5.4	0.01	Dec 10, 2020	Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-1326	Microsoft Azure Devops Server	Med	0.35	5.4	0.02	Jul 14, 2020	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2020-0700	Microsoft Azure Devops Server	Med	0.35	5.4	0.01	Mar 12, 2020	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2019-1305	Microsoft Team Foundation Server	Med	0.35	5.4	0.02	Sep 11, 2019	A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

CVE-2026-21512MedFeb 10, 2026
Azure
DevOps Server
risk 0.42cvss 6.5epss 0.01
Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.
CVE-2023-21751MedDec 14, 2023
Microsoft
Azure Devops Server
risk 0.42cvss 6.5epss 0.01
Azure DevOps Server Spoofing Vulnerability
CVE-2021-27067MedApr 13, 2021
Microsoft
Team Foundation Server
risk 0.42cvss 6.5epss 0.03
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
CVE-2020-17135MedDec 10, 2020
Microsoft
Azure Devops Server
risk 0.42cvss 6.4epss 0.01
Azure DevOps Server Spoofing Vulnerability
CVE-2019-0996MedJun 12, 2019
Microsoft
Azure Devops Server
risk 0.42cvss 6.5epss 0.02
A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery. An attacker who successfully exploited this vulnerability could bypass OAuth protections and register an application…
CVE-2023-36869MedAug 8, 2023
Microsoft
Azure Devops Server
risk 0.41cvss 6.3epss 0.01
Azure DevOps Server Spoofing Vulnerability
CVE-2021-28459MedApr 13, 2021
Microsoft
Azure Devops Server
risk 0.40cvss 6.1epss 0.02
Azure DevOps Server Spoofing Vulnerability
CVE-2020-1327MedJun 9, 2020
Microsoft
Azure Devops Server
risk 0.40cvss 6.1epss 0.02
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
CVE-2019-0874MedApr 9, 2019
Microsoft
Azure Devops Server
risk 0.40cvss 6.1epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2019-0871MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0870MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0869MedApr 9, 2019
Microsoft
Azure Devops Server
risk 0.40cvss 6.1epss 0.02
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
CVE-2019-0868MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0867MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866,…
CVE-2019-0866MedApr 9, 2019
Microsoft
Team Foundation Server
risk 0.40cvss 6.1epss 0.03
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867,…
CVE-2023-21569MedJun 14, 2023
Microsoft
Azure Devops Server
risk 0.36cvss 5.5epss 0.01
Azure DevOps Server Spoofing Vulnerability
CVE-2020-17145MedDec 10, 2020
Microsoft
Azure Devops Server
risk 0.35cvss 5.4epss 0.01
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-1326MedJul 14, 2020
Microsoft
Azure Devops Server
risk 0.35cvss 5.4epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2020-0700MedMar 12, 2020
Microsoft
Azure Devops Server
risk 0.35cvss 5.4epss 0.01
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2019-1305MedSep 11, 2019
Microsoft
Team Foundation Server
risk 0.35cvss 5.4epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

Page 2 of 3