Advisories · Technology

Microsoft Azure DevOps Server 2019 Update 1.1.

Every CVE that names Microsoft Azure DevOps Server 2019 Update 1.1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-27067 CVE record

CVSS 6.5 Medium

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
- Microsoft Azure DevOps Server 2019.0.1
- Microsoft Team Foundation Server 2017 Update 3.1
Not analysed yet 13 Apr 2021
CVE-2020-17145 CVE record

CVSS 5.4 Medium

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
- Microsoft Azure DevOps Server 2019 Update 1.1
- Microsoft Azure DevOps Server 2019.0.1
Not analysed yet 9 Dec 2020
CVE-2020-17135 CVE record

CVSS 6.4 Medium

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server 2019 Update 1.1
- Microsoft Azure DevOps Server 2019.0.1
Not analysed yet 9 Dec 2020
CVE-2020-1325 CVE record

CVSS 5.4 Medium

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
- Microsoft Azure DevOps Server 2019 Update 1.1
Not analysed yet 11 Nov 2020
CVE-2020-1326 CVE record

Microsoft Azure DevOps Server: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not…
- Microsoft Azure DevOps Server
- Microsoft Azure DevOps Server 2019
Not analysed yet 14 Jul 2020
CVE-2020-1327 CVE record

Microsoft Azure DevOps Server: A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to…
- Microsoft Azure DevOps Server
- Microsoft Azure DevOps Server 2019
Not analysed yet 9 Jun 2020
CVE-2020-0815 CVE record

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Eleva…
- Microsoft Azure DevOps Server 2019 Update 1.1
Not analysed yet 12 Mar 2020
CVE-2020-0758 CVE record

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Eleva…
- Microsoft Team Foundation Server 2018
- Microsoft Team Foundation Server
Not analysed yet 12 Mar 2020
CVE-2020-0700 CVE record

Microsoft Azure DevOps Server: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not…
- Microsoft Azure DevOps Server
- Microsoft Team Foundation Server 2018
Not analysed yet 12 Mar 2020