Known vulnerabilities in TeamCity - page 4

Software: TeamCity
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:teamcity:*:*:*:*:*:*:*:*
Total vulnerabilities: 123
Public exploits: 4
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeamCity TeamCity is affected by 123 known vulnerabilities: 2 critical, 8 high, 39 medium, 74 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109971 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-46618
CWE-79 Low
No
No
2025.03.1 30.05.2025 SB2025053008
#VU143902 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-47854
CWE-601 Low
No
No
2025.03.2 20.05.2025 SB20250520150
#VU143903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47853
CWE-79 Low
No
No
2025.03.2 20.05.2025 SB20250520150
#VU143904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47852
CWE-79 Low
No
No
2025.03.2 20.05.2025 SB20250520150
#VU143905 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47851
CWE-79 Low
No
No
2025.03.2 20.05.2025 SB20250520150
#VU143898 - Relative Path Traversal
CVE-2025-46433
CWE-23 Low
No
No
2025.03.1 25.04.2025 SB2025053008
#VU143899 - Information Exposure Through Log Files
CVE-2025-46432
CWE-532 Low
No
No
2025.03.1 25.04.2025 SB2025053008
#VU143889 - Information Exposure Through an Error Message
CVE-2025-31141
CWE-209 Low
No
No
2025.03 27.03.2025 SB20250327164
#VU143890 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-31140
CWE-79 Low
No
No
2025.03 27.03.2025 SB20250327164
#VU143891 - Information Exposure Through Log Files
CVE-2025-31139
CWE-532 Low
No
No
2025.03 27.03.2025 SB20250327164
#VU143885 - Insufficiently Protected Credentials
CVE-2025-26492
CWE-522 Low
No
No
2024.12.2 11.02.2025 SB20250211177
#VU143886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26493
CWE-79 Low
No
No
2024.12.2 11.02.2025 SB20250211177
#VU143880 - Missing Authorization
CVE-2025-24461
CWE-862 Low
No
No
2024.12.1 21.01.2025 SB20250121101
#VU143881 - Incorrect Authorization
CVE-2025-24460
CWE-863 Low
No
No
2024.12.1 21.01.2025 SB20250121101
#VU143882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24459
CWE-79 Low
No
No
2024.12.1 21.01.2025 SB20250121101
#VU87982 - Incorrect Authorization
CVE-2024-31134
CWE-863 Medium
No
No
2024.03 02.04.2024 SB2024040232
#VU87981 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-31135
CWE-601 Medium
No
No
2024.03 02.04.2024 SB2024040232
#VU87980 - Security Features
CVE-2024-31136
CWE-254 Medium
No
No
2024.03 02.04.2024 SB2024040232
#VU87979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31137
CWE-79 Low
No
No
2024.03 02.04.2024 SB2024040232
#VU87976 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31138
CWE-79 Low
No
No
2024.03 02.04.2024 SB2024040232


Showing elements 61 - 80 out of 123