Known vulnerabilities in Azure DevOps Server - page 2

Vendor: Microsoft
Software: Azure DevOps Server
Software CPE: cpe:2.3:a:microsoft:azure_devops_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 39
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Azure DevOps Server Azure DevOps Server is affected by 39 known vulnerabilities: 4 high, 22 medium, 13 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25868 - Memory corruption
CVE-2020-0815		 CWE-119 High
No
No
 - 10.03.2020 SB2020031012
#VU25867 - Memory corruption
CVE-2020-0758		 CWE-119 High
No
No
 - 10.03.2020 SB2020031012
#VU25866 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-0700		 CWE-79 Low
No
No
 - 10.03.2020 SB2020031011
#VU35496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1305		 CWE-79 Low
No
No
 - 12.09.2019 SB2019071517
#VU35497 - Improper input validation
CVE-2019-1306		 CWE-20 High
No
No
 - 12.09.2019 SB2019071517
#VU35714 - Improper input validation
CVE-2019-1072		 CWE-20 High
No
No
 - 15.07.2019 SB2019071517
#VU35715 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1076		 CWE-79 Low
No
No
 - 15.07.2019 SB2019071517
#VU35832 - Cross-Site Request Forgery (CSRF)
CVE-2019-0996		 CWE-352 Medium
No
No
 - 12.06.2019 SB2019040933
#VU18507 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0979		 CWE-79 Medium
No
No
 2019 Patch 2 16.05.2019 SB2019051602
#VU18506 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0872		 CWE-79 Medium
No
No
 2019 Patch 2 16.05.2019 SB2019051602
#VU18505 - Server-Side Request Forgery (SSRF)
CVE-2019-0971		 CWE-918 Medium
No
No
 2019 Patch 2 16.05.2019 SB2019051602
#VU36008 - Improper input validation
CVE-2019-0857		 CWE-20 Medium
No
No
 - 09.04.2019 SB2019040933
#VU36009 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0866		 CWE-79 Low
No
No
 - 09.04.2019 SB2019040934
#VU36010 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0867		 CWE-79 Low
No
No
 - 09.04.2019 SB2019040934
#VU36011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0868		 CWE-79 Low
No
No
 - 09.04.2019 SB2019040935
#VU36012 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-0869		 CWE-74 Medium
No
No
 - 09.04.2019 SB2019040933
#VU36013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0870		 CWE-79 Low
No
No
 - 09.04.2019 SB2019040934
#VU36014 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0871		 CWE-79 Low
No
No
 - 09.04.2019 SB2019040935
#VU36015 - Permissions, Privileges, and Access Controls
CVE-2019-0875		 CWE-264 Medium
No
No
 - 09.04.2019 SB2019040933


Showing elements 21 - 40 out of 39