Known vulnerabilities in TeamCity - page 2

Software: TeamCity
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:teamcity:*:*:*:*:*:*:*:*
Total vulnerabilities: 123
Public exploits: 4
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeamCity TeamCity is affected by 123 known vulnerabilities: 2 critical, 8 high, 39 medium, 74 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143828 - Incorrect Authorization
CVE-2026-49376
CWE-863 Low
No
No
2026.1 17.08.2026 SB2026051259
#VU143823 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49381
CWE-79 Medium
No
No
2026.1 17.08.2026 SB2026051259
#VU143822 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-49380
CWE-601 Low
No
No
2026.1 17.08.2026 SB2026051259
#VU143821 - Insufficiently Protected Credentials
CVE-2026-49379
CWE-522 Low
No
No
2026.1 17.08.2026 SB2026051259
#VU143820 - Missing Authorization
CVE-2026-49378
CWE-862 Low
No
No
2026.1 17.08.2026 SB2026051259
#VU143819 - Cleartext Storage of Sensitive Information in an Environment Variable
CVE-2026-49377
CWE-526 Low
No
No
2025.11.2 17.08.2026 SB2025121168
#VU143817 - Missing Authorization
CVE-2026-49374
CWE-862 Low
No
No
2026.1 17.08.2026 SB2026051259
#VU123267 - Missing Authorization
CVE-2026-28195
CWE-862 Low
No
No
2025.11.3 25.02.2026 SB2026022546
#VU123266 - Incomplete cleanup
CVE-2026-28196
CWE-459 Low
No
No
2025.11.3 25.02.2026 SB2026022546
#VU123265 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-28194
CWE-601 Low
No
No
2025.11.3 25.02.2026 SB2026022546
#VU120619 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68268
CWE-79 Low
No
No
2025.11.1 29.12.2025 SB2025122905
#VU120618 - Least Privilege Violation
CVE-2025-68267
CWE-272 Medium
No
No
2025.11.1 29.12.2025 SB2025122905
#VU120617 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2025-68162
CWE-829 Low
No
No
2025.11 29.12.2025 SB2025121167
#VU120616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68166
CWE-79 Medium
No
No
2025.11 29.12.2025 SB2025121167
#VU120614 - Observable discrepancy
CVE-2025-68164
CWE-203 Low
No
No
2025.11 29.12.2025 SB2025121167
#VU120613 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68163
CWE-79 Low
No
No
2025.11 29.12.2025 SB2025121167
#VU119873 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-67742
CWE-22 Low
No
No
2025.11 11.12.2025 SB2025121167
#VU119872 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-67741
CWE-79 Low
No
No
2025.11 11.12.2025 SB2025121167
#VU119871 - Incorrect Authorization
CVE-2025-67740
CWE-863 Low
No
No
2025.11 11.12.2025 SB2025121167
#VU119867 - Improper Authorization in Handler for Custom URL Scheme
CVE-2025-67739
CWE-939 Low
No
No
2025.11.2 11.12.2025 SB2025121168


Showing elements 21 - 40 out of 123