CVE Daily – Azure DevOps Server https://cvedaily.com/pages/tags/azure-devops-server.html CVE Daily – Azure DevOps Server en Wed, 03 Jun 2026 21:27:00 +0000 [Medium] CVE-2026-21512 – Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized a... https://nvd.nist.gov/vuln/detail/CVE-2026-21512 https://nvd.nist.gov/vuln/detail/CVE-2026-21512 Tue, 10 Feb 2026 18:16:33 +0000 Medium CVE-2026-21512

Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.

CVSS: 6.5 · CWE: CWE-918

View on NVD

]]> [High] CVE-2024-35267 – Azure DevOps Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-35267 https://nvd.nist.gov/vuln/detail/CVE-2024-35267 Tue, 09 Jul 2024 17:15:18 +0000 High CVE-2024-35267

Azure DevOps Server Spoofing Vulnerability

CVSS: 7.6 · CWE: CWE-79

View on NVD

]]> [High] CVE-2024-35266 – Azure DevOps Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-35266 https://nvd.nist.gov/vuln/detail/CVE-2024-35266 Tue, 09 Jul 2024 17:15:18 +0000 High CVE-2024-35266

Azure DevOps Server Spoofing Vulnerability

CVSS: 7.6 · CWE: CWE-79

View on NVD

]]> [High] CVE-2024-20667 – Azure DevOps Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-20667 https://nvd.nist.gov/vuln/detail/CVE-2024-20667 Tue, 13 Feb 2024 18:15:47 +0000 High CVE-2024-20667

Azure DevOps Server Remote Code Execution Vulnerability

CVSS: 7.5 · CWE: CWE-77

View on NVD

]]> [Medium] CVE-2023-21751 – Azure DevOps Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21751 https://nvd.nist.gov/vuln/detail/CVE-2023-21751 Thu, 14 Dec 2023 00:15:42 +0000 Medium CVE-2023-21751

Azure DevOps Server Spoofing Vulnerability

CVSS: 6.5 · CWE: CWE-284

View on NVD

]]> [High] CVE-2023-36437 – Azure DevOps Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36437 https://nvd.nist.gov/vuln/detail/CVE-2023-36437 Tue, 14 Nov 2023 21:15:10 +0000 High CVE-2023-36437

Azure DevOps Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-94

View on NVD

]]> [High] CVE-2023-36561 – Azure DevOps Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36561 https://nvd.nist.gov/vuln/detail/CVE-2023-36561 Tue, 10 Oct 2023 18:15:12 +0000 High CVE-2023-36561

Azure DevOps Server Elevation of Privilege Vulnerability

CVSS: 7.3 · CWE: CWE-284

View on NVD

]]> [High] CVE-2023-38155 – Azure DevOps Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-38155 https://nvd.nist.gov/vuln/detail/CVE-2023-38155 Tue, 12 Sep 2023 17:15:19 +0000 High CVE-2023-38155

Azure DevOps Server Remote Code Execution Vulnerability

CVSS: 7.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-33136 – Azure DevOps Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-33136 https://nvd.nist.gov/vuln/detail/CVE-2023-33136 Tue, 12 Sep 2023 17:15:09 +0000 High CVE-2023-33136

Azure DevOps Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-77

View on NVD

]]> [Medium] CVE-2023-36869 – Azure DevOps Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36869 https://nvd.nist.gov/vuln/detail/CVE-2023-36869 Tue, 08 Aug 2023 18:15:14 +0000 Medium CVE-2023-36869

Azure DevOps Server Spoofing Vulnerability

CVSS: 6.3 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2023-21569 – Azure DevOps Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21569 https://nvd.nist.gov/vuln/detail/CVE-2023-21569 Wed, 14 Jun 2023 00:15:09 +0000 Medium CVE-2023-21569

Azure DevOps Server Spoofing Vulnerability

CVSS: 5.5 · CWE: CWE-94

View on NVD

]]> [High] CVE-2023-21565 – Azure DevOps Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21565 https://nvd.nist.gov/vuln/detail/CVE-2023-21565 Wed, 14 Jun 2023 00:15:09 +0000 High CVE-2023-21565

Azure DevOps Server Spoofing Vulnerability

CVSS: 7.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2023-25722 – A credential-leak issue was discovered in related Veracode products before 2023-... https://nvd.nist.gov/vuln/detail/CVE-2023-25722 https://nvd.nist.gov/vuln/detail/CVE-2023-25722 Tue, 28 Mar 2023 20:15:11 +0000 Medium CVE-2023-25722

A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access of the Jenkins remote) to discover Veracode API credentials by listing the process and its arguments. Veracode Scan Jenkins Plugin…

CVSS: 5.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2023-21553 – Azure DevOps Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21553 https://nvd.nist.gov/vuln/detail/CVE-2023-21553 Tue, 14 Feb 2023 21:15:10 +0000 High CVE-2023-21553

Azure DevOps Server Remote Code Execution Vulnerability

CVSS: 7.5 · CWE: CWE-94

View on NVD

]]> [High] CVE-2023-21564 – Azure DevOps Server Cross-Site Scripting Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21564 https://nvd.nist.gov/vuln/detail/CVE-2023-21564 Tue, 14 Feb 2023 20:15:11 +0000 High CVE-2023-21564

Azure DevOps Server Cross-Site Scripting Vulnerability

CVSS: 7.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2021-28459 – Azure DevOps Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-28459 https://nvd.nist.gov/vuln/detail/CVE-2021-28459 Tue, 13 Apr 2021 20:15:20 +0000 Medium CVE-2021-28459

Azure DevOps Server Spoofing Vulnerability

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2021-27067 – Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerabil... https://nvd.nist.gov/vuln/detail/CVE-2021-27067 https://nvd.nist.gov/vuln/detail/CVE-2021-27067 Tue, 13 Apr 2021 20:15:15 +0000 Medium CVE-2021-27067

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

CVSS: 6.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2020-17145 – Azure DevOps Server and Team Foundation Services Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17145 https://nvd.nist.gov/vuln/detail/CVE-2020-17145 Thu, 10 Dec 2020 00:15:16 +0000 Medium CVE-2020-17145

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

CVSS: 5.4 · CWE: N/A

View on NVD

]]> [Medium] CVE-2020-17135 – Azure DevOps Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17135 https://nvd.nist.gov/vuln/detail/CVE-2020-17135 Thu, 10 Dec 2020 00:15:15 +0000 Medium CVE-2020-17135

Azure DevOps Server Spoofing Vulnerability

CVSS: 6.4 · CWE: N/A

View on NVD

]]> [Medium] CVE-2020-1325 – Azure DevOps Server and Team Foundation Services Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-1325 https://nvd.nist.gov/vuln/detail/CVE-2020-1325 Wed, 11 Nov 2020 07:15:20 +0000 Medium CVE-2020-1325

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

CVSS: 5.4 · CWE: N/A

View on NVD

]]> [Medium] CVE-2020-1326 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does ... https://nvd.nist.gov/vuln/detail/CVE-2020-1326 https://nvd.nist.gov/vuln/detail/CVE-2020-1326 Tue, 14 Jul 2020 23:15:12 +0000 Medium CVE-2020-1326

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.

CVSS: 5.4 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2020-1327 – A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails t... https://nvd.nist.gov/vuln/detail/CVE-2020-1327 https://nvd.nist.gov/vuln/detail/CVE-2020-1327 Tue, 09 Jun 2020 20:15:21 +0000 Medium CVE-2020-1327

A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [High] CVE-2020-0815 – An elevation of privilege vulnerability exists when Azure DevOps Server and Team... https://nvd.nist.gov/vuln/detail/CVE-2020-0815 https://nvd.nist.gov/vuln/detail/CVE-2020-0815 Thu, 12 Mar 2020 16:15:16 +0000 High CVE-2020-0815

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0758.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2020-0758 – An elevation of privilege vulnerability exists when Azure DevOps Server and Team... https://nvd.nist.gov/vuln/detail/CVE-2020-0758 https://nvd.nist.gov/vuln/detail/CVE-2020-0758 Thu, 12 Mar 2020 16:15:13 +0000 High CVE-2020-0758

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2020-0700 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does ... https://nvd.nist.gov/vuln/detail/CVE-2020-0700 https://nvd.nist.gov/vuln/detail/CVE-2020-0700 Thu, 12 Mar 2020 16:15:13 +0000 Medium CVE-2020-0700

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.

CVSS: 5.4 · CWE: CWE-79

View on NVD

]]> [Critical] CVE-2019-1306 – A remote code execution vulnerability exists when Azure DevOps Server (ADO) and ... https://nvd.nist.gov/vuln/detail/CVE-2019-1306 https://nvd.nist.gov/vuln/detail/CVE-2019-1306 Wed, 11 Sep 2019 22:15:19 +0000 Critical CVE-2019-1306

A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.

CVSS: 9.8 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2019-1072 – A remote code execution vulnerability exists when Azure DevOps Server and Team F... https://nvd.nist.gov/vuln/detail/CVE-2019-1072 https://nvd.nist.gov/vuln/detail/CVE-2019-1072 Mon, 15 Jul 2019 19:15:17 +0000 Critical CVE-2019-1072

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.

CVSS: 9.8 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2019-0996 – A spoofing vulnerability exists in Azure DevOps Server when it improperly handle... https://nvd.nist.gov/vuln/detail/CVE-2019-0996 https://nvd.nist.gov/vuln/detail/CVE-2019-0996 Wed, 12 Jun 2019 14:29:02 +0000 Medium CVE-2019-0996

A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery. An attacker who successfully exploited this vulnerability could bypass OAuth protections and register an application on behalf of the targeted user. To exploit this vulnerability, an attacker would need to create a page specifically desig…

CVSS: 6.5 · CWE: CWE-352

View on NVD

]]> [Medium] CVE-2019-0979 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and T... https://nvd.nist.gov/vuln/detail/CVE-2019-0979 https://nvd.nist.gov/vuln/detail/CVE-2019-0979 Thu, 16 May 2019 19:29:04 +0000 Medium CVE-2019-0979

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0872.

CVSS: 5.4 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-0971 – An information disclosure vulnerability exists when Azure DevOps Server and Micr... https://nvd.nist.gov/vuln/detail/CVE-2019-0971 https://nvd.nist.gov/vuln/detail/CVE-2019-0971 Thu, 16 May 2019 19:29:04 +0000 Medium CVE-2019-0971

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.

CVSS: 6.5 · CWE: CWE-116

View on NVD

]]> [Medium] CVE-2019-0872 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and T... https://nvd.nist.gov/vuln/detail/CVE-2019-0872 https://nvd.nist.gov/vuln/detail/CVE-2019-0872 Thu, 16 May 2019 19:29:01 +0000 Medium CVE-2019-0872

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.

CVSS: 5.4 · CWE: CWE-79

View on NVD

]]> [High] CVE-2019-0875 – An elevation of privilege vulnerability exists when Azure DevOps Server 2019 doe... https://nvd.nist.gov/vuln/detail/CVE-2019-0875 https://nvd.nist.gov/vuln/detail/CVE-2019-0875 Tue, 09 Apr 2019 21:29:03 +0000 High CVE-2019-0875

An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions, aka 'Azure DevOps Server Elevation of Privilege Vulnerability'.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2019-0874 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does ... https://nvd.nist.gov/vuln/detail/CVE-2019-0874 https://nvd.nist.gov/vuln/detail/CVE-2019-0874 Tue, 09 Apr 2019 21:29:03 +0000 Medium CVE-2019-0874

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-0871 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and T... https://nvd.nist.gov/vuln/detail/CVE-2019-0871 https://nvd.nist.gov/vuln/detail/CVE-2019-0871 Tue, 09 Apr 2019 21:29:02 +0000 Medium CVE-2019-0871

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868, CVE-2019-0870.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-0870 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and T... https://nvd.nist.gov/vuln/detail/CVE-2019-0870 https://nvd.nist.gov/vuln/detail/CVE-2019-0870 Tue, 09 Apr 2019 21:29:02 +0000 Medium CVE-2019-0870

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868, CVE-2019-0871.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-0869 – A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails t... https://nvd.nist.gov/vuln/detail/CVE-2019-0869 https://nvd.nist.gov/vuln/detail/CVE-2019-0869 Tue, 09 Apr 2019 21:29:02 +0000 Medium CVE-2019-0869

A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-0868 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and T... https://nvd.nist.gov/vuln/detail/CVE-2019-0868 https://nvd.nist.gov/vuln/detail/CVE-2019-0868 Tue, 09 Apr 2019 21:29:02 +0000 Medium CVE-2019-0868

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0870, CVE-2019-0871.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-0867 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and T... https://nvd.nist.gov/vuln/detail/CVE-2019-0867 https://nvd.nist.gov/vuln/detail/CVE-2019-0867 Tue, 09 Apr 2019 21:29:02 +0000 Medium CVE-2019-0867

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-0866 – A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and T... https://nvd.nist.gov/vuln/detail/CVE-2019-0866 https://nvd.nist.gov/vuln/detail/CVE-2019-0866 Tue, 09 Apr 2019 21:29:02 +0000 Medium CVE-2019-0866

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-0857 – A spoofing vulnerability that could allow a security feature bypass exists in wh... https://nvd.nist.gov/vuln/detail/CVE-2019-0857 https://nvd.nist.gov/vuln/detail/CVE-2019-0857 Tue, 09 Apr 2019 21:29:02 +0000 Medium CVE-2019-0857

A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Spoofing Vulnerability'.

CVSS: 6.5 · CWE: CWE-116

View on NVD

]]>