Advisories · Technology

Microsoft Azure DevOps Server 2022.0.1.

Every CVE that names Microsoft Azure DevOps Server 2022.0.1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-36561 CVE record

CVSS 7.3 High

Azure DevOps Server Elevation of Privilege Vulnerability
- Microsoft Azure DevOps Server 2022.0.1
- Microsoft Azure DevOps Server 2020.0.2
- Broken access control
Not analysed yet 10 Oct 2023
CVE-2023-38155 CVE record

CVSS 7.0 High

Azure DevOps Server Remote Code Execution Vulnerability
- Microsoft Azure DevOps Server 2019.0.1
- Microsoft Azure DevOps Server 2022.0.1
- Insecure deserialization
Not analysed yet 12 Sept 2023
CVE-2023-33136 CVE record

CVSS 8.8 High

Azure DevOps Server Remote Code Execution Vulnerability
- Microsoft Azure DevOps Server 2020.0.2
- Microsoft Azure DevOps Server
- Command injection
Not analysed yet 12 Sept 2023
CVE-2023-36869 CVE record

CVSS 6.3 Medium

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server
- Microsoft Azure DevOps Server 2019.0.1
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2023-21569 CVE record

CVSS 5.5 Medium

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server 2020.1.2
- Microsoft Azure DevOps Server 2022
- Code injection
Not analysed yet 13 Jun 2023
CVE-2023-21565 CVE record

CVSS 7.1 High

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server 2022
- Microsoft Azure DevOps Server 2020.1.2
- Cross-site scripting (XSS)
Not analysed yet 13 Jun 2023