Advisories · Technology

Microsoft Azure DevOps Server 2019.0.1.

Every CVE that names Microsoft Azure DevOps Server 2019.0.1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-38155 CVE record

CVSS 7.0 High

Azure DevOps Server Remote Code Execution Vulnerability
- Microsoft Azure DevOps Server 2019.0.1
- Microsoft Azure DevOps Server 2022.0.1
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-33136 CVE record

CVSS 8.8 High

Azure DevOps Server Remote Code Execution Vulnerability
- Microsoft Azure DevOps Server 2020.0.2
- Microsoft Azure DevOps Server
- Command injection
Not analysed yet 12 Sept 2023
CVE-2023-36869 CVE record

CVSS 6.3 Medium

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server
- Microsoft Azure DevOps Server 2019.0.1
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2021-27067 CVE record

CVSS 6.5 Medium

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
- Microsoft Azure DevOps Server 2019.0.1
- Microsoft Team Foundation Server 2017 Update 3.1
Not analysed yet 13 Apr 2021
CVE-2020-17145 CVE record

CVSS 5.4 Medium

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
- Microsoft Azure DevOps Server 2019 Update 1.1
- Microsoft Azure DevOps Server 2019.0.1
Not analysed yet 9 Dec 2020
CVE-2020-17135 CVE record

CVSS 6.4 Medium

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server 2019 Update 1.1
- Microsoft Azure DevOps Server 2019.0.1
Not analysed yet 9 Dec 2020