Known vulnerabilities in TeamCity - page 5

Vendor: JetBrains s.r.o.
Software: TeamCity
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:teamcity:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 118
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeamCity TeamCity is affected by 118 known vulnerabilities: 2 critical, 7 high, 36 medium, 73 low Critical High Medium Low

Vulnerabilities (118)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80950 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-42793		 CWE-288 High
Available
Exploited
 2023.05.4 21.09.2023 SB2023092118
#VU80949 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43566		 CWE-79 Low
No
No
 2023.05.4 21.09.2023 SB2023092118
#VU66533 - Information Exposure Through Log Files
CVE-2022-38133		 CWE-532 Low
No
No
 2022.04.3 16.08.2022 SB2022081627
#VU65786 - Exposure of sensitive information to an unauthorized actor
CVE-2022-36321		 CWE-200 Low
No
No
 2022.04.2 26.07.2022 SB2022072618
#VU65784 - Argument Injection or Modification
CVE-2022-36322		 CWE-88 Medium
No
No
 2022.04.2 26.07.2022 SB2022072618
#VU58010 - Insecure inherited permissions
CVE-2021-43201		 CWE-277 Low
No
No
 2021.1.3 08.11.2021 SB2021110818
#VU58009 - Protection Mechanism Failure
CVE-2021-43202		 CWE-693 Low
No
No
 2021.1.3 08.11.2021 SB2021110818
#VU58008 - Permissions, Privileges, and Access Controls
CVE-2021-43200		 CWE-264 Low
No
No
 2021.1.2 08.11.2021 SB2021110817
#VU58007 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43198		 CWE-79 Low
No
No
 2021.1.2 08.11.2021 SB2021110817
#VU58006 - Permissions, Privileges, and Access Controls
CVE-2021-43199		 CWE-264 Low
No
No
 2021.1.2 08.11.2021 SB2021110817
#VU58005 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43197		 CWE-94 Low
No
No
 2021.1.2 08.11.2021 SB2021110817
#VU58004 - Protection Mechanism Failure
CVE-2021-43195		 CWE-693 Low
No
No
 2021.1.2 08.11.2021 SB2021110817
#VU58003 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43196		 CWE-200 Low
No
No
 2021.1 08.11.2021 SB2021110816
#VU58002 - Improper input validation
CVE-2021-43193		 CWE-20 High
No
No
 2021.1.2 08.11.2021 SB2021110817
#VU58001 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43194		 CWE-200 Low
No
No
 2021.1.2 08.11.2021 SB2021110817
#VU30302 - Exposure of sensitive information to an unauthorized actor
CVE-2020-11686		 CWE-200 Low
No
No
 2019.1.4 22.04.2020 SB2020042248
#VU24839 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7911		 CWE-79 Low
No
No
 2019.2 03.02.2020 SB2020020310
#VU24838 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7910		 CWE-79 Low
No
No
 2019.2 03.02.2020 SB2020020310
#VU24837 - Insufficiently Protected Credentials
CVE-2020-7909		 CWE-522 Medium
No
No
 2019.1.5 03.02.2020 SB2020020309
#VU24836 - Use of Web Link to Untrusted Target with window.opener Access
CVE-2020-7908		 CWE-1022 Low
No
No
 2019.1.5 03.02.2020 SB2020020309


Showing elements 81 - 100 out of 118