Known vulnerabilities in TeamCity - page 6

Vendor: JetBrains s.r.o.
Software: TeamCity
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:teamcity:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 118
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TeamCity TeamCity is affected by 118 known vulnerabilities: 2 critical, 7 high, 36 medium, 73 low Critical High Medium Low

Vulnerabilities (118)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22505 - Permissions, Privileges, and Access Controls
CVE-2019-18367		 CWE-264 Medium
No
No
 2019.1.2 04.11.2019 SB2019110409
#VU22504 - Exposure of sensitive information to an unauthorized actor
CVE-2019-18366		 CWE-200 Medium
No
No
 2019.1.2 04.11.2019 SB2019110409
#VU22503 - Exposure of sensitive information to an unauthorized actor
CVE-2019-18363		 CWE-200 Medium
No
No
 2019.1.2 04.11.2019 SB2019110409
#VU22502 - Use of Web Link to Untrusted Target with window.opener Access
CVE-2019-18365		 CWE-1022 Low
No
No
 2019.1.4 04.11.2019 SB2019110410
#VU22501 - Deserialization of Untrusted Data
CVE-2019-18364		 CWE-502 High
No
No
 2019.1.4 04.11.2019 SB2019110410
#VU35196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-15036		 CWE-78 Medium
No
No
 - 02.10.2019 SB2019100134
#VU35197 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15037		 CWE-79 Low
No
No
 - 02.10.2019 SB2019100134
#VU35198 - Exposure of sensitive information to an unauthorized actor
CVE-2019-15035		 CWE-200 Medium
No
No
 - 01.10.2019 SB2019100134
#VU35200 - Improper Certificate Validation
CVE-2019-15042		 CWE-295 Medium
No
No
 - 01.10.2019 SB2019100134
#VU35201 - Improper input validation
CVE-2019-15038		 CWE-20 Medium
No
No
 - 01.10.2019 SB2019100134
#VU35205 - Improper input validation
CVE-2019-15039		 CWE-20 High
Available
No
 - 01.10.2019 SB2019100134
#VU35581 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15848		 CWE-79 Low
No
No
 - 05.09.2019 SB2019090529
#VU31019 - Improper input validation
CVE-2019-12841		 CWE-20 Medium
No
No
 2018.2.2 03.07.2019 SB2019070310
#VU31020 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12842		 CWE-79 Low
No
No
 2018.2.2 03.07.2019 SB2019070310
#VU31021 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-12843		 CWE-74 Medium
No
No
 2018.2.3 03.07.2019 SB2019070311
#VU31022 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-12844		 CWE-74 Medium
No
No
 2018.2.3 03.07.2019 SB2019070311
#VU31023 - Improper input validation
CVE-2019-12845		 CWE-20 Medium
No
No
 2018.2.3 03.07.2019 SB2019070311
#VU31024 - Permissions, Privileges, and Access Controls
CVE-2019-12846		 CWE-264 Low
No
No
 2018.2.2 03.07.2019 SB2019070310


Showing elements 101 - 120 out of 118