Known vulnerabilities in TeamCity - page 3

Software: TeamCity
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:teamcity:*:*:*:*:*:*:*:*
Total vulnerabilities: 123
Public exploits: 4
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeamCity TeamCity is affected by 123 known vulnerabilities: 2 critical, 8 high, 39 medium, 74 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68165
CWE-79 Low
No
No
2025.11 29.12.2025 SB2025121167
#VU114382 - Insufficiently Protected Credentials
CVE-2025-57734
CWE-522 Medium
No
No
2025.07.1 22.08.2025 SB2025082217
#VU114381 - Incorrect Default Permissions
CVE-2025-57732
CWE-276 Low
No
No
2025.07.1 22.08.2025 SB2025082217
#VU114380 - Command injection
CVE-2025-57733
CWE-77 Medium
No
No
2025.07.1 22.08.2025 SB2025082217
#VU113426 - Use of Weak Hash
CVE-2025-54535
CWE-328 Medium
No
No
2025.07 29.07.2025 SB2025072963
#VU113425 - Incorrect Default Permissions
CVE-2025-54530
CWE-276 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113424 - Cross-Site Request Forgery (CSRF)
CVE-2025-54528
CWE-352 Medium
No
No
2025.07 29.07.2025 SB2025072963
#VU113423 - Incorrect Authorization
CVE-2025-54533
CWE-863 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113422 - Cleartext Storage of Sensitive Information
CVE-2025-54537
CWE-312 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113421 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-54531
CWE-22 High
No
No
2025.07 29.07.2025 SB2025072963
#VU113420 - Cleartext Transmission of Sensitive Information
CVE-2025-54538
CWE-319 Medium
No
No
2025.07 29.07.2025 SB2025072963
#VU113419 - Cross-Site Request Forgery (CSRF)
CVE-2025-54536
CWE-352 Medium
No
No
2025.07 29.07.2025 SB2025072963
#VU113418 - Incorrect Authorization
CVE-2025-54532
CWE-863 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113417 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54534
CWE-79 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU113416 - Cross-Site Request Forgery (CSRF)
CVE-2025-54529
CWE-352 Low
No
No
2025.07 29.07.2025 SB2025072963
#VU143906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52879
CWE-79 Medium
No
No
2025.03.3 23.06.2025 SB2025062353
#VU143907 - Missing Authorization
CVE-2025-52878
CWE-862 Low
No
No
2025.03.3 23.06.2025 SB2025062353
#VU143908 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52877
CWE-79 Medium
No
No
2025.03.3 23.06.2025 SB2025062353
#VU143909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52876
CWE-79 Medium
No
No
2025.03.3 23.06.2025 SB2025062353
#VU143910 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52875
CWE-79 Low
No
No
2025.03.3 23.06.2025 SB2025062353


Showing elements 41 - 60 out of 123