Microsoft Azure DevOps Server vulnerabilities

CVEs per yearBy the year they were published

1. 201916
2. 20204
3. 20233
4. 20241

Newest CVEs

• CVE-2024-20667

  Azure DevOps Server Remote Code Execution Vulnerability

  Microsoft · Azure DevOps Server

  High7.5
• CVE-2023-38155

  Azure DevOps Server Remote Code Execution Vulnerability

  Microsoft · Azure DevOps Server 2019.0.1

  High7.0
• CVE-2023-33136

  Azure DevOps Server Remote Code Execution Vulnerability

  Microsoft · Azure DevOps Server 2020.0.2

  High8.8
• CVE-2023-36869

  Azure DevOps Server Spoofing Vulnerability

  Microsoft · Azure DevOps Server

  Medium6.3
• CVE-2020-1326

  A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site…

  Microsoft · Azure DevOps Server

  Medium5.4
• CVE-2020-1327

  A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection…

  Microsoft · Azure DevOps Server

  Medium6.1
• CVE-2020-0758

  An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps…

  Microsoft · Team Foundation Server 2018

  High7.5
• CVE-2020-0700

  A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site…

  Microsoft · Azure DevOps Server

  Medium5.4
• CVE-2019-1306

  A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps…

  Microsoft · Team Foundation Server 2018

  Critical9.8
• CVE-2019-1305

  A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server…

  Microsoft · Team Foundation Server

  Medium5.4