Known vulnerabilities in Azure DevOps Server 2022

Vendor: Microsoft
Software: Azure DevOps Server
Version: 2022
Software CPE: cpe:2.3:a:microsoft:azure_devops_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Azure DevOps Server version 2022 Azure DevOps Server 2022 is affected by 4 vulnerabilities: 4 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122567 - Server-Side Request Forgery (SSRF)
CVE-2026-21512		 CWE-918 Medium
No
No
 - 10.02.2026 SB2026021077
#VU77245 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-21565		 CWE-451 Medium
No
No
 - 13.06.2023 SB2023061359
#VU77244 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-21569		 CWE-451 Medium
No
No
 - 13.06.2023 SB2023061359
#VU72232 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-21564		 CWE-79 Medium
No
No
 2022 Patch 2 15.02.2023 SB2023021515