Known vulnerabilities in Team Foundation Server 2018 Update 3
Vendor:
Microsoft
Software:
Team Foundation Server
Version:
2018 Update 3
Software CPE:
cpe:2.3:a:microsoft:team_foundation_server:*:*:*:*:*:*:*:*
Website:
https://www.microsoft.com
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
2019
2013
2012
2010
2012 Update 4
2013 Update 5
2010 SP1
2017 Update 3.1 Patch 5
2017 Update 3.1 Patch 4
2017 Update 3.1 Patch 3
2017 Update 3
2017
2015 Update 4.2 Patch 1
2015 Update 4.2
2015 Update 4.1
2015 Update 4
2015
2018
2018 Update 1.2 Patch 4
2018 Update 1.2 Patch 3
2018 Update 1.2 Patch 2
2018 Update 1
2018 Update 3.2 Patch 4
2018 Update 3.2 Patch 3
2018 Update 3.2 Patch 2
2018 Update 3.2 Patch 1
2018 Update 3.2
2018 Update 1.2
2017 Update 3.1
2018 Update 3.1
2018 Update 3
2018 Update 1.1
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU18507 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-0979 |
CWE-79 | Medium | 2017 Update 3.1 Patch 5, 2018 Update 1.2 Patch 4, 2018 Update 3.2 Patch 4 | 16.05.2019 |
SB2019051602 |
||
| #VU17013 - Exposure of sensitive information to an unauthorized actor CVE-2019-0647 |
CWE-200 | Low | 2018 Update 3.2 | 16.01.2019 |
SB2019011603 |
||
| #VU17012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-0646 |
CWE-79 | Low | 2018 Update 3.2 | 16.01.2019 |
SB2019011603 |
||
| #VU15843 - Improper Authorization CVE-2018-8529 |
CWE-285 | High | - | 13.11.2018 |
SB2018111315 |
||
| #VU15842 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-8602 |
CWE-79 | Low | - | 13.11.2018 |
SB2018111315 |