Known vulnerabilities in Azure DevOps Server 2018

Vendor: Microsoft
Software: Azure DevOps Server
Version: 2018
Software CPE: cpe:2.3:a:microsoft:azure_devops_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Azure DevOps Server version 2018 Azure DevOps Server 2018 is affected by 6 vulnerabilities: 2 high, 4 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1305		 CWE-79 Low
No
No
 - 12.09.2019 SB2019071517
#VU35497 - Improper input validation
CVE-2019-1306		 CWE-20 High
No
No
 - 12.09.2019 SB2019071517
#VU35714 - Improper input validation
CVE-2019-1072		 CWE-20 High
No
No
 - 15.07.2019 SB2019071517
#VU35715 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1076		 CWE-79 Low
No
No
 - 15.07.2019 SB2019071517
#VU36011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0868		 CWE-79 Low
No
No
 - 09.04.2019 SB2019040935
#VU36014 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0871		 CWE-79 Low
No
No
 - 09.04.2019 SB2019040935