CVSS: 6.5EPSS: 12%CPEs: 8EXPL: 0CVE-2021-27067 – Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-27067
13 Apr 2021 — Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability Una vulnerabilidad de Divulgación de Información de Azure DevOps Server y Team Foundation Server • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27067 •
CVSS: 5.4EPSS: 0%CPEs: 7EXPL: 0CVE-2020-17145 – Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2020-17145
09 Dec 2020 — Azure DevOps Server and Team Foundation Services Spoofing Vulnerability Vulnerabilidad de suplantación de identidad en Azure DevOps Server y Team Foundation Services • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17145 •
CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0CVE-2019-1305
https://notcve.org/view.php?id=CVE-2019-1305
11 Sep 2019 — A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. Se presenta una vulnerabilidad de tipo Cross-site Scripting (XSS) cuando Team Foundation Server no sanea apropiadamente la entrada proporcionada por el usuario, también se conoce como "Team Foundation Server Cross-site Scripting Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1305 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 24%CPEs: 8EXPL: 0CVE-2019-1072
https://notcve.org/view.php?id=CVE-2019-1072
15 Jul 2019 — A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'. Existe una vulnerabilidad de ejecución de código remota cuando Azure DevOps Server y Team Foundation Server (TFS), manejan inapropiadamente las entradas de los usuarios, también se conoce como "Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1072 • CWE-20: Improper Input Validation •
CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0CVE-2019-0872
https://notcve.org/view.php?id=CVE-2019-0872
16 May 2019 — A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979. Existe una vulnerabilidad de tipo Cross-site Scripting (XSS) cuando Azure DevOps Server y Team Foundation Server no se hace un saneamiento adecuado para la entrada suministrada por el usuario, también se conoce como 'Azure DevOps Ser... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0872 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 5EXPL: 0CVE-2019-0866
https://notcve.org/view.php?id=CVE-2019-0866
09 Apr 2019 — A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871. Se presenta una vulnerabilidad de tipo Cross-site Scripting (XSS) cuando Azure DevOps Server y Team Foundation Server no hacen el saneamiento apropiado en la entrada provista por el usuari... • http://www.securityfocus.com/bid/107749 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •