Product by Microsoft
Microsoft Azure DevOps Server
40 known vulnerabilities in Microsoft Azure DevOps Server (Microsoft), 0 of them actively exploited (CISA KEV).
Key figures
40
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-1306 | Microsoft Azure DevOps Server: Remote Code Execution | 9.8 | |
| Critical | CVE-2019-1072 | Microsoft Team Foundation Server: Remote Code Execution | 9.8 | |
| Medium | CVE-2019-0971 | Microsoft Azure DevOps Server: Information Disclosure | 6.5 | |
| High | CVE-2019-0875 | Microsoft Azure DevOps Server: Privilege Escalation | 7.5 | |
| Medium | CVE-2019-0857 | Microsoft Azure DevOps Server: Security Feature Bypass | 6.5 | |
| High | CVE-2023-33136 | Azure DevOps Server Remote Code Execution Vulnerability | 8.8 | |
| Medium | CVE-2021-27067 | Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability | 6.5 | |
| High | CVE-2020-0758 | Microsoft Azure DevOps Server: Privilege Escalation | 7.5 | |
| High | CVE-2024-35267 | Azure DevOps Server Spoofing Vulnerability | 7.6 | |
| High | CVE-2024-35266 | Azure DevOps Server Spoofing Vulnerability | 7.6 | |
| Medium | CVE-2019-0866 | Microsoft Team Foundation Server: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2020-0815 | Microsoft Azure DevOps Server: Privilege Escalation | 7.5 | |
| Medium | CVE-2019-0870 | Microsoft Team Foundation Server: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2019-0871 | Microsoft Team Foundation Server: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2019-0868 | Microsoft Team Foundation Server: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2019-0867 | Microsoft Azure DevOps Server: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-28459 | Azure DevOps Server Spoofing Vulnerability | 6.1 | |
| High | CVE-2024-20667 | Azure DevOps Server Remote Code Execution Vulnerability | 7.5 | |
| Medium | CVE-2019-0874 | Microsoft Azure DevOps Server: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2023-21553 | Azure DevOps Server Remote Code Execution Vulnerability | 7.5 | |
| Medium | CVE-2019-0869 | Microsoft Azure DevOps Server: Spoofing | 6.1 | |
| Medium | CVE-2020-1327 | Microsoft Azure DevOps Server: Spoofing | 6.1 | |
| Medium | CVE-2026-21512 | Azure DevOps Server Cross-Site Scripting Vulnerability | 6.5 | |
| High | CVE-2023-38155 | Azure DevOps Server Remote Code Execution Vulnerability | 7.0 | |
| Medium | CVE-2019-0996 | Azure DevOps Server Spoofing Vulnerability | 6.5 |