Known vulnerabilities in TeamCity - page 3

Software: TeamCity
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:teamcity:*:*:*:*:*:*:*:*
Total vulnerabilities: 118
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeamCity TeamCity is affected by 118 known vulnerabilities: 2 critical, 7 high, 36 medium, 73 low Critical High Medium Low

Vulnerabilities (118)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113425 - Incorrect Default Permissions
CVE-2025-54530
CWE-276 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113424 - Cross-Site Request Forgery (CSRF)
CVE-2025-54528
CWE-352 Medium
No
No
2025.07 29.07.2025 SB2025072963
#VU113423 - Incorrect Authorization
CVE-2025-54533
CWE-863 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113422 - Cleartext Storage of Sensitive Information
CVE-2025-54537
CWE-312 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113421 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-54531
CWE-22 High
No
No
2025.07 29.07.2025 SB2025072963
#VU113420 - Cleartext Transmission of Sensitive Information
CVE-2025-54538
CWE-319 Medium
No
No
2025.07 29.07.2025 SB2025072963
#VU113419 - Cross-Site Request Forgery (CSRF)
CVE-2025-54536
CWE-352 Medium
No
No
2025.07 29.07.2025 SB2025072963
#VU113418 - Incorrect Authorization
CVE-2025-54532
CWE-863 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113417 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54534
CWE-79 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113416 - Cross-Site Request Forgery (CSRF)
CVE-2025-54529
CWE-352 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU143906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52879
CWE-79 Medium
No
No
2025.03.3 23.06.2025 SB2025062353
#VU143907 - Missing Authorization
CVE-2025-52878
CWE-862 Low
No
No
2025.03.3 23.06.2025 SB2025062353
#VU143908 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52877
CWE-79 Medium
No
No
2025.03.3 23.06.2025 SB2025062353
#VU143909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52876
CWE-79 Medium
No
No
2025.03.3 23.06.2025 SB2025062353
#VU143910 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52875
CWE-79 Low
No
No
2025.03.3 23.06.2025 SB2025062353
#VU109971 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-46618
CWE-79 Low
No
No
2025.03.1 30.05.2025 SB2025053008
#VU143902 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-47854
CWE-601 Low
No
No
2025.03.2 20.05.2025 SB20250520150
#VU143903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47853
CWE-79 Low
No
No
2025.03.2 20.05.2025 SB20250520150
#VU143898 - Relative Path Traversal
CVE-2025-46433
CWE-23 Low
No
No
2025.03.1 25.04.2025 SB2025053008
#VU143899 - Information Exposure Through Log Files
CVE-2025-46432
CWE-532 Low
No
No
2025.03.1 25.04.2025 SB2025053008


Showing elements 41 - 60 out of 118