Known vulnerabilities in Azure DevOps Server 2019 Patch 1
Vendor:
Microsoft
Software:
Azure DevOps Server
Version:
2019 Patch 1
Software CPE:
cpe:2.3:a:microsoft:azure_devops_server:*:*:*:*:*:*:*:*
Website:
https://www.microsoft.com
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Vulnerabilities by Severity
2020 Update 1.2 Patch 19
2020 Update 1.2 Patch 18
20260204.3
2020 Update 1.2 Patch 17
2020 Update 1.2 Patch 16
2020 Update 1.2 Patch 15
2020 Update 1.2 Patch 14
2020 Update 1.2 Patch 13
2020 Update 1.2 Patch 12
2022.1
2020 Update 1.2 Patch 11
2022 Update 0.1 Patch 5
2020 Update 1.2 Patch 10
2019.0.1 Patch 16
20230927.1
20230926.2
20230926.1
2022 Update 0.1 Patch 4
2020 Update 1.2 Patch 9
20230601.3
20230825.1
20230820.2
20230823.1
20230825.4
2019.0.1 Patch 15
2022 Update 0.1 Patch 3
2020 Update 1.2 Patch 8
2019.1.2
2019.0.1 Patch 14
2019.0.1 Patch 13
2022 Update 0.1 Patch 2
2020 Update 1.2 Patch 7
2022 Update 0.1 Patch 1
2022 Patch 4
2020 Update 1.2 Patch 6
2022.0.1
2020.1.2
2022 Update 0.1
2022 Update 0.1 RC
2022 Patch 3
2022 Patch 2
2022 Patch 1
2022
2022 RC2
2022 RC1
2020.1.1 Patch 4
2020.1.1 Patch 3
2020.1.1 Patch 2
2020.1.1 Patch 1
2020.1 RTW
2020.1 RC2
2020.1 RC1
2020.1 Patch 2
2020.1 Patch 1
2020 Update 1.2 Patch 5
2020 Update 1.2 Patch 4
2020 Update 1.2 Patch 3
2020 Update 1.2 Patch 2
2020 Update 1.2 Patch 1
2020 Update 1.2
2020 Update 1.1
2019.0.1 Patch 12
2019.0.1 Patch 11
2019.0.1 Patch 10
2019.0.1 Patch 9
2019.0.1 Patch 8
2019.0.1 Patch 7
2019.0.1 Patch 6
2019.0.1 Patch 5
2020.0.1
2013
2012
2010
2018
2017
2015
2019 Update 1.1
2019.0.1 Patch 3
2019.0.1 Patch 2
2019.0.1 Patch 1
2019.0.1
2019.0.1 RC
2019 Patch 2
2019 Patch 1
2019
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU18507 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-0979 |
CWE-79 | Medium | 2019 Patch 2 | 16.05.2019 |
SB2019051602 |
||
| #VU18506 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-0872 |
CWE-79 | Medium | 2019 Patch 2 | 16.05.2019 |
SB2019051602 |
||
| #VU18505 - Server-Side Request Forgery (SSRF) CVE-2019-0971 |
CWE-918 | Medium | 2019 Patch 2 | 16.05.2019 |
SB2019051602 |