Team Foundation Server 2018 (Microsoft) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2020-12-10. Vendor: Microsoft.
CVEs of Team Foundation Server 2018
- CVE-2020-17145 - CVSS 5.4 (medium), 2020-12-10: Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
- CVE-2020-0758 - CVSS 7.5 (high), 2020-03-12: An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps…
- CVE-2020-0700 - CVSS 5.4 (medium), 2020-03-12: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site…
- CVE-2019-1305 - CVSS 5.4 (medium), 2019-09-11: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server…
- CVE-2019-1306 - CVSS 9.8 (critical), 2019-09-11: A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure…
- CVE-2019-1076 - CVSS 5.4 (medium), 2019-07-15: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server…
- CVE-2019-1072 - CVSS 9.8 (critical), 2019-07-15: A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server…
- CVE-2019-0979 - CVSS 5.4 (medium), 2019-05-16: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure…
- CVE-2019-0971 - CVSS 6.5 (medium), 2019-05-16: An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted…
- CVE-2019-0872 - CVSS 5.4 (medium), 2019-05-16: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure…
- CVE-2019-0866 - CVSS 6.1 (medium), 2019-04-09: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure…
- CVE-2019-0870 - CVSS 6.1 (medium), 2019-04-09: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure…
- CVE-2019-0868 - CVSS 6.1 (medium), 2019-04-09: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure…
- CVE-2019-0867 - CVSS 6.1 (medium), 2019-04-09: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure…
- CVE-2019-0871 - CVSS 6.1 (medium), 2019-04-09: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure…
- CVE-2019-0777 - CVSS 5.4 (medium), 2019-04-09: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server…
- CVE-2019-0742 - CVSS 5.4 (medium), 2019-03-05: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server…
- CVE-2019-0743 - CVSS 5.4 (medium), 2019-03-05: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server…
