Known vulnerabilities in TeamCity - page 2

Software: TeamCity
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:teamcity:*:*:*:*:*:*:*:*
Total vulnerabilities: 118
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeamCity TeamCity is affected by 118 known vulnerabilities: 2 critical, 7 high, 36 medium, 73 low Critical High Medium Low

Vulnerabilities (118)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143828 - Incorrect Authorization
CVE-2026-49376
CWE-863 Low
No
No
2026.1 17.08.2026 SB2026051259
#VU143819 - Cleartext Storage of Sensitive Information in an Environment Variable
CVE-2026-49377
CWE-526 Low
No
No
2025.11.2 17.08.2026 SB2025121168
#VU123267 - Missing Authorization
CVE-2026-28195
CWE-862 Low
No
No
2025.11.3 25.02.2026 SB2026022546
#VU123266 - Incomplete cleanup
CVE-2026-28196
CWE-459 Low
No
No
2025.11.3 25.02.2026 SB2026022546
#VU123265 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-28194
CWE-601 Low
No
No
2025.11.3 25.02.2026 SB2026022546
#VU120619 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68268
CWE-79 Low
No
No
2025.11.1 29.12.2025 SB2025122905
#VU120618 - Least Privilege Violation
CVE-2025-68267
CWE-272 Medium
No
No
2025.11.1 29.12.2025 SB2025122905
#VU120617 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2025-68162
CWE-829 Low
No
No
2025.11 29.12.2025 SB2025121167
#VU120616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68166
CWE-79 Medium
No
No
2025.11 29.12.2025 SB2025121167
#VU120615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68165
CWE-79 Low
No
No
2025.11 29.12.2025 SB2025121167
#VU120614 - Observable discrepancy
CVE-2025-68164
CWE-203 Low
No
No
2025.11 29.12.2025 SB2025121167
#VU120613 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68163
CWE-79 Low
No
No
2025.11 29.12.2025 SB2025121167
#VU119873 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-67742
CWE-22 Low
No
No
2025.11 11.12.2025 SB2025121167
#VU119872 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-67741
CWE-79 Low
No
No
2025.11 11.12.2025 SB2025121167
#VU119871 - Incorrect Authorization
CVE-2025-67740
CWE-863 Low
No
No
2025.11 11.12.2025 SB2025121167
#VU119867 - Improper Authorization in Handler for Custom URL Scheme
CVE-2025-67739
CWE-939 Low
No
No
2025.11.2 11.12.2025 SB2025121168
#VU114382 - Insufficiently Protected Credentials
CVE-2025-57734
CWE-522 Medium
No
No
2025.07.1 22.08.2025 SB2025082217
#VU114381 - Incorrect Default Permissions
CVE-2025-57732
CWE-276 Low
No
No
2025.07.1 22.08.2025 SB2025082217
#VU114380 - Command injection
CVE-2025-57733
CWE-77 Medium
No
No
2025.07.1 22.08.2025 SB2025082217
#VU113426 - Use of Weak Hash
CVE-2025-54535
CWE-328 Medium
No
No
2025.07 29.07.2025 SB2025072963


Showing elements 21 - 40 out of 118