Advisories · Technology

Microsoft Team Foundation Server.

Every CVE that names Microsoft Team Foundation Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-0758 CVE record

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Eleva…
- Microsoft Team Foundation Server 2018
- Microsoft Team Foundation Server
Not analysed yet 12 Mar 2020
CVE-2020-0700 CVE record

Microsoft Azure DevOps Server: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not…
- Microsoft Azure DevOps Server
- Microsoft Team Foundation Server 2018
Not analysed yet 12 Mar 2020
CVE-2019-1305 CVE record

Microsoft Team Foundation Server: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not…
- Microsoft Team Foundation Server
- Microsoft Team Foundation Server 2018
Not analysed yet 11 Sept 2019
CVE-2019-1072 CVE record

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Ex…
- Microsoft Team Foundation Server 2012
- Microsoft Team Foundation Server 2013 Update 5
Not analysed yet 15 Jul 2019
CVE-2019-0979 CVE record

Microsoft Team Foundation Server: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team…
- Microsoft Team Foundation Server
- Microsoft Team Foundation Server 2018
Not analysed yet 16 May 2019
CVE-2019-0872 CVE record

Microsoft Team Foundation Server: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team…
- Microsoft Team Foundation Server
- Microsoft Team Foundation Server 2018
Not analysed yet 16 May 2019
CVE-2019-0871 CVE record

Microsoft Team Foundation Server: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team…
- Microsoft Team Foundation Server
- Microsoft Team Foundation Server 2018
Not analysed yet 9 Apr 2019
CVE-2019-0870 CVE record

Microsoft Team Foundation Server: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team…
- Microsoft Team Foundation Server
- Microsoft Team Foundation Server 2018
Not analysed yet 9 Apr 2019
CVE-2019-0868 CVE record

Microsoft Team Foundation Server: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team…
- Microsoft Team Foundation Server
- Microsoft Team Foundation Server 2018
Not analysed yet 9 Apr 2019
CVE-2019-0866 CVE record

Microsoft Team Foundation Server: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team…
- Microsoft Team Foundation Server
- Microsoft Team Foundation Server 2018
Not analysed yet 9 Apr 2019
CVE-2019-0777 CVE record

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
- Microsoft Team Foundation Server 2018
- Microsoft Team Foundation Server
Not analysed yet 9 Apr 2019