Known vulnerabilities in Azure DevOps Server 2017

Vendor: Microsoft
Software: Azure DevOps Server
Version: 2017
Software CPE: cpe:2.3:a:microsoft:azure_devops_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Azure DevOps Server version 2017 Azure DevOps Server 2017 is affected by 4 vulnerabilities: 1 high, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1305		 CWE-79 Low
No
No
 - 12.09.2019 SB2019071517
#VU35714 - Improper input validation
CVE-2019-1072		 CWE-20 High
No
No
 - 15.07.2019 SB2019071517
#VU36011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0868		 CWE-79 Low
No
No
 - 09.04.2019 SB2019040935
#VU36014 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0871		 CWE-79 Low
No
No
 - 09.04.2019 SB2019040935