Microsoft
Microsoft Team Foundation Server: vulnerabilidades y CVE
Microsoft Team Foundation Server tiene 23 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE23
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-27067 | Media (6.5) | 2.6% | — | 13 abr 2021 | Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability |
| CVE-2020-17145 | Media (5.4) | 1.5% | — | 10 dic 2020 | Azure DevOps Server and Team Foundation Services Spoofing Vulnerability |
| CVE-2020-0758 | Alta (7.5) | 2.0% | — | 12 mar 2020 | An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege… |
| CVE-2020-0700 | Media (5.4) | 1.3% | — | 12 mar 2020 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'. |
| CVE-2019-1306 | Crítica (9.8) | 17% | — | 11 sept 2019 | A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution… |
| CVE-2019-1305 | Media (5.4) | 1.5% | — | 11 sept 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. |
| CVE-2019-1076 | Media (5.4) | 1.6% | — | 15 jul 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. |
| CVE-2019-1072 | Crítica (9.8) | 13% | — | 15 jul 2019 | A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution… |
| CVE-2019-0979 | Media (5.4) | 1.7% | — | 16 may 2019 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site… |
| CVE-2019-0971 | Media (6.5) | 8.5% | — | 16 may 2019 | An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps… |
| CVE-2019-0872 | Media (5.4) | 1.7% | — | 16 may 2019 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site… |
| CVE-2019-0871 | Media (6.1) | 2.4% | — | 9 abr 2019 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site… |
| CVE-2019-0870 | Media (6.1) | 2.4% | — | 9 abr 2019 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site… |
| CVE-2019-0868 | Media (6.1) | 2.4% | — | 9 abr 2019 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site… |
| CVE-2019-0867 | Media (6.1) | 2.4% | — | 9 abr 2019 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site… |
| CVE-2019-0866 | Media (6.1) | 2.6% | — | 9 abr 2019 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site… |
| CVE-2019-0777 | Media (5.4) | 1.7% | — | 9 abr 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. |
| CVE-2019-0743 | Media (5.4) | 1.8% | — | 5 mar 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from… |
| CVE-2019-0742 | Media (5.4) | 1.8% | — | 5 mar 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from… |
| CVE-2019-0647 | Media (6.5) | 4.6% | — | 17 ene 2019 | An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team. |
| CVE-2019-0646 | Media (5.4) | 1.5% | — | 17 ene 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team. |
| CVE-2018-8529 | Crítica (9.8) | 13% | — | 15 nov 2018 | A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code… |
| CVE-2018-8602 | Media (5.4) | 1.7% | — | 14 nov 2018 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.