Microsoft
Microsoft Azure Devops Server: vulnerabilidades y CVE
Microsoft Azure Devops Server tiene 40 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE40
Últimos 12 meses1
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-21512 | Media (6.5) | 1.0% | — | 10 feb 2026 | Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network. |
| CVE-2024-35267 | Alta (7.6) | 1.6% | — | 9 jul 2024 | Azure DevOps Server Spoofing Vulnerability |
| CVE-2024-35266 | Alta (7.6) | 1.6% | — | 9 jul 2024 | Azure DevOps Server Spoofing Vulnerability |
| CVE-2024-20667 | Alta (7.5) | 1.4% | — | 13 feb 2024 | Azure DevOps Server Remote Code Execution Vulnerability |
| CVE-2023-21751 | Media (6.5) | 0.98% | — | 14 dic 2023 | Azure DevOps Server Spoofing Vulnerability |
| CVE-2023-36561 | Alta (7.3) | 0.87% | — | 10 oct 2023 | Azure DevOps Server Elevation of Privilege Vulnerability |
| CVE-2023-38155 | Alta (8.1) | 1.3% | — | 12 sept 2023 | Azure DevOps Server Remote Code Execution Vulnerability |
| CVE-2023-33136 | Alta (8.8) | 1.7% | — | 12 sept 2023 | Azure DevOps Server Remote Code Execution Vulnerability |
| CVE-2023-36869 | Media (6.3) | 0.69% | — | 8 ago 2023 | Azure DevOps Server Spoofing Vulnerability |
| CVE-2023-21569 | Media (5.5) | 0.68% | — | 14 jun 2023 | Azure DevOps Server Spoofing Vulnerability |
| CVE-2023-21565 | Alta (7.1) | 0.93% | — | 14 jun 2023 | Azure DevOps Server Spoofing Vulnerability |
| CVE-2023-21553 | Alta (7.5) | 1.4% | — | 14 feb 2023 | Azure DevOps Server Remote Code Execution Vulnerability |
| CVE-2023-21564 | Alta (7.1) | 0.89% | — | 14 feb 2023 | Azure DevOps Server Cross-Site Scripting Vulnerability |
| CVE-2021-28459 | Media (6.1) | 2.3% | — | 13 abr 2021 | Azure DevOps Server Spoofing Vulnerability |
| CVE-2021-27067 | Media (6.5) | 2.6% | — | 13 abr 2021 | Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability |
| CVE-2020-17145 | Media (5.4) | 1.5% | — | 10 dic 2020 | Azure DevOps Server and Team Foundation Services Spoofing Vulnerability |
| CVE-2020-17135 | Media (5.4) | 1.3% | — | 10 dic 2020 | Azure DevOps Server Spoofing Vulnerability |
| CVE-2020-1325 | Media (5.4) | 1.6% | — | 11 nov 2020 | Azure DevOps Server and Team Foundation Services Spoofing Vulnerability |
| CVE-2020-1326 | Media (5.4) | 1.6% | — | 14 jul 2020 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'. |
| CVE-2020-1327 | Media (6.1) | 1.8% | — | 9 jun 2020 | A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'. |
| CVE-2020-0815 | Alta (7.5) | 1.8% | — | 12 mar 2020 | An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege… |
| CVE-2020-0758 | Alta (7.5) | 2.0% | — | 12 mar 2020 | An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege… |
| CVE-2020-0700 | Media (5.4) | 1.3% | — | 12 mar 2020 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'. |
| CVE-2019-1306 | Crítica (9.8) | 17% | — | 11 sept 2019 | A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution… |
| CVE-2019-1305 | Media (5.4) | 1.5% | — | 11 sept 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. |
| CVE-2019-1076 | Media (5.4) | 1.6% | — | 15 jul 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. |
| CVE-2019-1072 | Crítica (9.8) | 13% | — | 15 jul 2019 | A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution… |
| CVE-2019-0996 | Media (6.5) | 1.6% | — | 12 jun 2019 | A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery. An attacker who successfully exploited this vulnerability… |
| CVE-2019-0979 | Media (5.4) | 1.7% | — | 16 may 2019 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site… |
| CVE-2019-0971 | Media (6.5) | 8.5% | — | 16 may 2019 | An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.