Known vulnerabilities in TeamCity - page 4

Software: TeamCity
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:teamcity:*:*:*:*:*:*:*:*
Total vulnerabilities: 118
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeamCity TeamCity is affected by 118 known vulnerabilities: 2 critical, 7 high, 36 medium, 73 low Critical High Medium Low

Vulnerabilities (118)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47852
CWE-79 Low
No
No
2025.03.2 20.05.2025 SB20250520150
#VU143905 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47851
CWE-79 Low
No
No
2025.03.2 20.05.2025 SB20250520150
#VU143889 - Information Exposure Through an Error Message
CVE-2025-31141
CWE-209 Low
No
No
2025.03 27.03.2025 SB20250327164
#VU143890 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-31140
CWE-79 Low
No
No
2025.03 27.03.2025 SB20250327164
#VU143891 - Information Exposure Through Log Files
CVE-2025-31139
CWE-532 Low
No
No
2025.03 27.03.2025 SB20250327164
#VU143885 - Insufficiently Protected Credentials
CVE-2025-26492
CWE-522 Low
No
No
2024.12.2 11.02.2025 SB20250211177
#VU143886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26493
CWE-79 Low
No
No
2024.12.2 11.02.2025 SB20250211177
#VU143880 - Missing Authorization
CVE-2025-24461
CWE-862 Low
No
No
2024.12.1 21.01.2025 SB20250121101
#VU143881 - Incorrect Authorization
CVE-2025-24460
CWE-863 Low
No
No
2024.12.1 21.01.2025 SB20250121101
#VU143882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24459
CWE-79 Low
No
No
2024.12.1 21.01.2025 SB20250121101
#VU87982 - Incorrect Authorization
CVE-2024-31134
CWE-863 Medium
No
No
2024.03 02.04.2024 SB2024040232
#VU87981 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-31135
CWE-601 Medium
No
No
2024.03 02.04.2024 SB2024040232
#VU87980 - Security Features
CVE-2024-31136
CWE-254 Medium
No
No
2024.03 02.04.2024 SB2024040232
#VU87979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31137
CWE-79 Low
No
No
2024.03 02.04.2024 SB2024040232
#VU87978 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-31139
CWE-611 Low
No
No
2024.03 02.04.2024 SB2024040232
#VU87977 - Security Features
CVE-2024-31140
CWE-254 Low
No
No
2024.03 02.04.2024 SB2024040232
#VU87976 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31138
CWE-79 Low
No
No
2024.03 02.04.2024 SB2024040232
#VU87117 - Improper Authentication
CVE-2024-27199
CWE-287 High
No
Exploited
2023.11.4 05.03.2024 SB2024030516
#VU87116 - Improper Authentication
CVE-2024-27198
CWE-287 Critical
Available
Exploited
2023.11.4 05.03.2024 SB2024030516
#VU86218 - Improper Authentication
CVE-2024-23917
CWE-287 High
No
No
2023.11.3 07.02.2024 SB2024020732


Showing elements 61 - 80 out of 118