Advisories · Technology

Microsoft Azure DevOps Server 2022.

Every CVE that names Microsoft Azure DevOps Server 2022 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-21512 CVE record

CVSS 6.5 Medium

Azure DevOps Server Cross-Site Scripting Vulnerability
- Microsoft Azure DevOps Server 2022
- Server-side request forgery (SSRF)
Not analysed yet 10 Feb 2026
CVE-2024-35267 CVE record

CVSS 7.6 High

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server 2022
- Cross-site scripting (XSS)
Not analysed yet 9 Jul 2024
CVE-2024-35266 CVE record

CVSS 7.6 High

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server 2022
- Cross-site scripting (XSS)
Not analysed yet 9 Jul 2024
CVE-2024-20667 CVE record

CVSS 7.5 High

Azure DevOps Server Remote Code Execution Vulnerability
- Microsoft Azure DevOps Server
- Microsoft Azure DevOps Server 2020.1.2
- Command injection
Not analysed yet 13 Feb 2024
CVE-2023-21751 CVE record

CVSS 6.5 Medium

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server 2022
- Microsoft Azure DevOps Server 2020.1.2
- Broken access control
Not analysed yet 13 Dec 2023
CVE-2023-21569 CVE record

CVSS 5.5 Medium

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server 2020.1.2
- Microsoft Azure DevOps Server 2022
- Code injection
Not analysed yet 13 Jun 2023
CVE-2023-21565 CVE record

CVSS 7.1 High

Azure DevOps Server Spoofing Vulnerability
- Microsoft Azure DevOps Server 2022
- Microsoft Azure DevOps Server 2020.1.2
- Cross-site scripting (XSS)
Not analysed yet 13 Jun 2023
CVE-2023-21564 CVE record

CVSS 7.1 High

Azure DevOps Server Cross-Site Scripting Vulnerability
- Microsoft Azure DevOps Server 2022
- Cross-site scripting (XSS)
Not analysed yet 14 Feb 2023