# JetBrains TeamCity. Every CVE that names JetBrains TeamCity among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-52877.md) `CVE-2025-52877` · CVE record: JetBrains TeamCity · CVSS 4.8 Medium · EPSS 0.37 · Not analysed yet · Published 23 Jun 2025 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-52876.md) `CVE-2025-52876` · CVE record: JetBrains TeamCity · CVSS 5.4 Medium · EPSS 0.39 · Not analysed yet · Published 23 Jun 2025 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-52875.md) `CVE-2025-52875` · CVE record: JetBrains TeamCity · CVSS 5.4 Medium · Not analysed yet · Published 23 Jun 2025 · Tags: Cross-site scripting (XSS) - [Open redirect in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-47854.md) `CVE-2025-47854` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2025 · Tags: Open redirect - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-47853.md) `CVE-2025-47853` · CVE record: JetBrains TeamCity · CVSS 4.8 Medium · Not analysed yet · Published 20 May 2025 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-47852.md) `CVE-2025-47852` · CVE record: JetBrains TeamCity · CVSS 4.8 Medium · Not analysed yet · Published 20 May 2025 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-47851.md) `CVE-2025-47851` · CVE record: JetBrains TeamCity · CVSS 4.8 Medium · Not analysed yet · Published 20 May 2025 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-46618.md) `CVE-2025-46618` · CVE record: JetBrains TeamCity · CVSS 3.5 Low · EPSS 0.63 · Not analysed yet · Published 25 Apr 2025 · Tags: Cross-site scripting (XSS) - [Path traversal in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-46433.md) `CVE-2025-46433` · CVE record: JetBrains TeamCity · CVSS 4.9 Medium · Not analysed yet · Published 25 Apr 2025 · Tags: Path traversal - [Sensitive information in log files in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-46432.md) `CVE-2025-46432` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 25 Apr 2025 · Tags: Information disclosure - [Sensitive information in error messages in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-31141.md) `CVE-2025-31141` · CVE record: JetBrains TeamCity · CVSS 2.7 Low · Not analysed yet · Published 27 Mar 2025 · Tags: Information disclosure - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-31140.md) `CVE-2025-31140` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · EPSS 0.28 · Not analysed yet · Published 27 Mar 2025 · Tags: Cross-site scripting (XSS) - [Sensitive information in log files in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-31139.md) `CVE-2025-31139` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 27 Mar 2025 · Tags: Information disclosure - [Insufficiently protected credentials in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-26492.md) `CVE-2025-26492` · CVE record: JetBrains TeamCity · CVSS 7.7 High · Not analysed yet · Published 11 Feb 2025 · Tags: Hard-coded credentials - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-26493.md) `CVE-2025-26493` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Cross-site scripting (XSS) - [Missing authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-24461.md) `CVE-2025-24461` · CVE record: JetBrains TeamCity · CVSS 6.5 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: Broken access control - [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-24460.md) `CVE-2025-24460` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: Broken access control - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2025-24459.md) `CVE-2025-24459` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: Cross-site scripting (XSS) - [XML external entity injection in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-56356.md) `CVE-2024-56356` · CVE record: JetBrains TeamCity · CVSS 5.9 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: XML external entities (XXE) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-56355.md) `CVE-2024-56355` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: Cross-site scripting (XSS) - [Insufficiently protected credentials in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-56354.md) `CVE-2024-56354` · CVE record: JetBrains TeamCity · CVSS 5.5 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: Hard-coded credentials - [In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies](https://agentprime.io/advisories/CVE-2024-56353.md) `CVE-2024-56353` · CVE record: JetBrains TeamCity · CVSS 5.5 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: CWE-212 - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-56352.md) `CVE-2024-56352` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: Cross-site scripting (XSS) - [Insufficient session expiration in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-56351.md) `CVE-2024-56351` · CVE record: JetBrains TeamCity · CVSS 6.3 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: Authentication bypass - [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-56350.md) `CVE-2024-56350` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: Broken access control - [Missing authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-56349.md) `CVE-2024-56349` · CVE record: JetBrains TeamCity · CVSS 5.3 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: Broken access control - [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-56348.md) `CVE-2024-56348` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 20 Dec 2024 · Tags: Broken access control - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-47951.md) `CVE-2024-47951` · CVE record: JetBrains TeamCity · CVSS 3.5 Low · Not analysed yet · Published 8 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-47950.md) `CVE-2024-47950` · CVE record: JetBrains TeamCity · CVSS 3.5 Low · Not analysed yet · Published 8 Oct 2024 · Tags: Cross-site scripting (XSS) - [Path traversal in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-47949.md) `CVE-2024-47949` · CVE record: JetBrains TeamCity · CVSS 4.9 Medium · EPSS 0.23 · Not analysed yet · Published 8 Oct 2024 · Tags: Path traversal - [Path traversal in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-47948.md) `CVE-2024-47948` · CVE record: JetBrains TeamCity · CVSS 4.9 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Path traversal - [Insufficiently protected credentials in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-47161.md) `CVE-2024-47161` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Hard-coded credentials - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-43810.md) `CVE-2024-43810` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 16 Aug 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-43809.md) `CVE-2024-43809` · CVE record: JetBrains TeamCity · CVSS 3.5 Low · Not analysed yet · Published 16 Aug 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-43808.md) `CVE-2024-43808` · CVE record: JetBrains TeamCity · CVSS 3.7 Low · Not analysed yet · Published 16 Aug 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-43807.md) `CVE-2024-43807` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 16 Aug 2024 · Tags: Cross-site scripting (XSS) - [Incorrect default permissions in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-43114.md) `CVE-2024-43114` · CVE record: JetBrains TeamCity · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2024 · Tags: Broken access control - [JetBrains TeamCity: In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen…](https://agentprime.io/advisories/CVE-2024-41829.md) `CVE-2024-41829` · CVE record: JetBrains TeamCity · CVSS 3.5 Low · Not analysed yet · Published 22 Jul 2024 · Tags: Authentication bypass - [In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time](https://agentprime.io/advisories/CVE-2024-41828.md) `CVE-2024-41828` · CVE record: JetBrains TeamCity · CVSS 2.6 Low · Not analysed yet · Published 22 Jul 2024 · Tags: CWE-208 - [Insufficient session expiration in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-41827.md) `CVE-2024-41827` · CVE record: JetBrains TeamCity · CVSS 7.4 High · Not analysed yet · Published 22 Jul 2024 · Tags: Authentication bypass - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-41826.md) `CVE-2024-41826` · CVE record: JetBrains TeamCity · CVSS 3.5 Low · Not analysed yet · Published 22 Jul 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-41825.md) `CVE-2024-41825` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 22 Jul 2024 · Tags: Cross-site scripting (XSS) - [Sensitive information in log files in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-41824.md) `CVE-2024-41824` · CVE record: JetBrains TeamCity · CVSS 6.4 Medium · Not analysed yet · Published 22 Jul 2024 · Tags: Information disclosure - [Insufficiently protected credentials in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-39879.md) `CVE-2024-39879` · CVE record: JetBrains TeamCity · CVSS 5.0 Medium · Not analysed yet · Published 1 Jul 2024 · Tags: Hard-coded credentials - [Insufficiently protected credentials in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-39878.md) `CVE-2024-39878` · CVE record: JetBrains TeamCity · CVSS 4.1 Medium · Not analysed yet · Published 1 Jul 2024 · Tags: Hard-coded credentials - [Authentication bypass in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36470.md) `CVE-2024-36470` · CVE record: JetBrains TeamCity · CVSS 8.1 High · Not analysed yet · Published 29 May 2024 · Tags: Authentication bypass - [Resource allocation without limits in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36378.md) `CVE-2024-36378` · CVE record: JetBrains TeamCity · CVSS 5.9 Medium · Not analysed yet · Published 29 May 2024 · Tags: Denial of service - [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36377.md) `CVE-2024-36377` · CVE record: JetBrains TeamCity · CVSS 6.5 Medium · Not analysed yet · Published 29 May 2024 · Tags: Broken access control - [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36376.md) `CVE-2024-36376` · CVE record: JetBrains TeamCity · CVSS 6.5 Medium · Not analysed yet · Published 29 May 2024 · Tags: Broken access control - [Sensitive information in error messages in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36375.md) `CVE-2024-36375` · CVE record: JetBrains TeamCity · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2024 · Tags: Information disclosure - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36374.md) `CVE-2024-36374` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36373.md) `CVE-2024-36373` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36372.md) `CVE-2024-36372` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36371.md) `CVE-2024-36371` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36370.md) `CVE-2024-36370` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36369.md) `CVE-2024-36369` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36368.md) `CVE-2024-36368` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36367.md) `CVE-2024-36367` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36366.md) `CVE-2024-36366` · CVE record: JetBrains TeamCity · CVSS 5.4 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS) - [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36365.md) `CVE-2024-36365` · CVE record: JetBrains TeamCity · CVSS 6.8 Medium · Not analysed yet · Published 29 May 2024 · Tags: Broken access control Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .