Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

40 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-1076	Modificada	Media (5.4)	1.6%	—	Microsoft Team Foundation Server Microsoft Azure Devops Server	15/7/2019	17/6/2026	A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
CVE-2019-1072	Modificada	Crítica (9.8)	13%	—	Microsoft Team Foundation Server Microsoft Azure Devops Server	15/7/2019	17/6/2026	A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
CVE-2019-0996	Modificada	Media (6.5)	1.6%	—	Microsoft Azure Devops Server	12/6/2019	17/6/2026	A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery. An attacker who successfully exploited this vulnerability could bypass OAuth protections and register an application on behalf of the targeted user. To…
CVE-2019-0979	Modificada	Media (5.4)	1.7%	—	Microsoft Team Foundation Server Microsoft Azure Devops Server	16/5/2019	17/6/2026	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0872.
CVE-2019-0971	Modificada	Media (6.5)	8.5%	—	Microsoft Team Foundation Server Microsoft Azure Devops Server	16/5/2019	17/6/2026	An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.
CVE-2019-0872	Modificada	Media (5.4)	1.7%	—	Microsoft Team Foundation Server Microsoft Azure Devops Server	16/5/2019	17/6/2026	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.
CVE-2019-0875	Modificada	Alta (7.5)	3.0%	—	Microsoft Azure Devops Server	9/4/2019	17/6/2026	An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions, aka 'Azure DevOps Server Elevation of Privilege Vulnerability'.
CVE-2019-0874	Modificada	Media (6.1)	2.0%	—	Microsoft Azure Devops Server	9/4/2019	17/6/2026	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2019-0871	Modificada	Media (6.1)	2.4%	—	Microsoft Team Foundation Server Microsoft Azure Devops Server	9/4/2019	17/6/2026	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868,…
CVE-2019-0870	Modificada	Media (6.1)	2.4%	—	Microsoft Azure Devops Server Microsoft Team Foundation Server	9/4/2019	17/6/2026	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868,…
CVE-2019-0869	Modificada	Media (6.1)	2.0%	—	Microsoft Azure Devops Server	9/4/2019	17/6/2026	A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
CVE-2019-0868	Modificada	Media (6.1)	2.4%	—	Microsoft Team Foundation Server Microsoft Azure Devops Server	9/4/2019	17/6/2026	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0870,…
CVE-2019-0867	Modificada	Media (6.1)	2.4%	—	Microsoft Azure Devops Server Microsoft Team Foundation Server	9/4/2019	17/6/2026	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0868, CVE-2019-0870,…
CVE-2019-0866	Modificada	Media (6.1)	2.6%	—	Microsoft Azure Devops Server Microsoft Team Foundation Server	9/4/2019	17/6/2026	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867, CVE-2019-0868, CVE-2019-0870,…
CVE-2019-0857	Modificada	Media (6.5)	3.9%	—	Microsoft Azure Devops Server	9/4/2019	17/6/2026	A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Spoofing Vulnerability'.