<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>CVE Daily – Azure DevOps Server (High+Critical)</title>
  <link>https://cvedaily.com/pages/tags/azure-devops-server.html</link>
  <atom:link href="https://cvedaily.com/feed-tags/azure-devops-server-severe.xml" rel="self" type="application/rss+xml"/>
  <description>CVE Daily – Azure DevOps Server (High+Critical)</description>
  <language>en</language>
  <lastBuildDate>Wed, 03 Jun 2026 21:27:00 +0000</lastBuildDate>
  <item>
    <title>[High] CVE-2024-35267 – Azure DevOps Server Spoofing Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2024-35267</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2024-35267</guid>
    <pubDate>Tue, 09 Jul 2024 17:15:18 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2024-35267</strong></p>
  <p>Azure DevOps Server Spoofing Vulnerability</p>
  <p><strong>CVSS:</strong> 7.6 · <strong>CWE:</strong> CWE-79</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-35267">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2024-35266 – Azure DevOps Server Spoofing Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2024-35266</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2024-35266</guid>
    <pubDate>Tue, 09 Jul 2024 17:15:18 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2024-35266</strong></p>
  <p>Azure DevOps Server Spoofing Vulnerability</p>
  <p><strong>CVSS:</strong> 7.6 · <strong>CWE:</strong> CWE-79</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-35266">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2024-20667 – Azure DevOps Server Remote Code Execution Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2024-20667</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2024-20667</guid>
    <pubDate>Tue, 13 Feb 2024 18:15:47 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2024-20667</strong></p>
  <p>Azure DevOps Server Remote Code Execution Vulnerability</p>
  <p><strong>CVSS:</strong> 7.5 · <strong>CWE:</strong> CWE-77</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-20667">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2023-36437 – Azure DevOps Server Remote Code Execution Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2023-36437</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2023-36437</guid>
    <pubDate>Tue, 14 Nov 2023 21:15:10 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2023-36437</strong></p>
  <p>Azure DevOps Server Remote Code Execution Vulnerability</p>
  <p><strong>CVSS:</strong> 8.8 · <strong>CWE:</strong> CWE-94</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-36437">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2023-36561 – Azure DevOps Server Elevation of Privilege Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2023-36561</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2023-36561</guid>
    <pubDate>Tue, 10 Oct 2023 18:15:12 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2023-36561</strong></p>
  <p>Azure DevOps Server Elevation of Privilege Vulnerability</p>
  <p><strong>CVSS:</strong> 7.3 · <strong>CWE:</strong> CWE-284</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-36561">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2023-38155 – Azure DevOps Server Remote Code Execution Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2023-38155</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2023-38155</guid>
    <pubDate>Tue, 12 Sep 2023 17:15:19 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2023-38155</strong></p>
  <p>Azure DevOps Server Remote Code Execution Vulnerability</p>
  <p><strong>CVSS:</strong> 7.0 · <strong>CWE:</strong> CWE-502</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-38155">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2023-33136 – Azure DevOps Server Remote Code Execution Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2023-33136</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2023-33136</guid>
    <pubDate>Tue, 12 Sep 2023 17:15:09 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2023-33136</strong></p>
  <p>Azure DevOps Server Remote Code Execution Vulnerability</p>
  <p><strong>CVSS:</strong> 8.8 · <strong>CWE:</strong> CWE-77</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-33136">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2023-21565 – Azure DevOps Server Spoofing Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2023-21565</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2023-21565</guid>
    <pubDate>Wed, 14 Jun 2023 00:15:09 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2023-21565</strong></p>
  <p>Azure DevOps Server Spoofing Vulnerability</p>
  <p><strong>CVSS:</strong> 7.1 · <strong>CWE:</strong> CWE-79</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-21565">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2023-21553 – Azure DevOps Server Remote Code Execution Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2023-21553</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2023-21553</guid>
    <pubDate>Tue, 14 Feb 2023 21:15:10 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2023-21553</strong></p>
  <p>Azure DevOps Server Remote Code Execution Vulnerability</p>
  <p><strong>CVSS:</strong> 7.5 · <strong>CWE:</strong> CWE-94</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-21553">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2023-21564 – Azure DevOps Server Cross-Site Scripting Vulnerability</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2023-21564</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2023-21564</guid>
    <pubDate>Tue, 14 Feb 2023 20:15:11 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2023-21564</strong></p>
  <p>Azure DevOps Server Cross-Site Scripting Vulnerability</p>
  <p><strong>CVSS:</strong> 7.1 · <strong>CWE:</strong> CWE-79</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-21564">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2020-0815 – An elevation of privilege vulnerability exists when Azure DevOps Server and Team...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2020-0815</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2020-0815</guid>
    <pubDate>Thu, 12 Mar 2020 16:15:16 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2020-0815</strong></p>
  <p>An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0758.</p>
  <p><strong>CVSS:</strong> 7.5 · <strong>CWE:</strong> N/A</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2020-0815">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2020-0758 – An elevation of privilege vulnerability exists when Azure DevOps Server and Team...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2020-0758</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2020-0758</guid>
    <pubDate>Thu, 12 Mar 2020 16:15:13 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2020-0758</strong></p>
  <p>An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.</p>
  <p><strong>CVSS:</strong> 7.5 · <strong>CWE:</strong> N/A</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2020-0758">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[Critical] CVE-2019-1306 – A remote code execution vulnerability exists when Azure DevOps Server (ADO) and ...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2019-1306</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2019-1306</guid>
    <pubDate>Wed, 11 Sep 2019 22:15:19 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk critical">Critical</span> CVE-2019-1306</strong></p>
  <p>A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.</p>
  <p><strong>CVSS:</strong> 9.8 · <strong>CWE:</strong> CWE-20</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2019-1306">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[Critical] CVE-2019-1072 – A remote code execution vulnerability exists when Azure DevOps Server and Team F...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2019-1072</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2019-1072</guid>
    <pubDate>Mon, 15 Jul 2019 19:15:17 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk critical">Critical</span> CVE-2019-1072</strong></p>
  <p>A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.</p>
  <p><strong>CVSS:</strong> 9.8 · <strong>CWE:</strong> CWE-20</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2019-1072">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[High] CVE-2019-0875 – An elevation of privilege vulnerability exists when Azure DevOps Server 2019 doe...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2019-0875</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2019-0875</guid>
    <pubDate>Tue, 09 Apr 2019 21:29:03 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2019-0875</strong></p>
  <p>An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions, aka 'Azure DevOps Server Elevation of Privilege Vulnerability'.</p>
  <p><strong>CVSS:</strong> 7.5 · <strong>CWE:</strong> N/A</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2019-0875">View on NVD</a></p>
]]>
    </description>
  </item>
</channel>
</rss>
