Product by Microsoft

Microsoft Team Foundation Server

23 known vulnerabilities in Microsoft Team Foundation Server (Microsoft), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Microsoft Team Foundation Server (Microsoft)

Critical	CVE-2019-1306	Microsoft Azure DevOps Server: Remote Code Execution also in 2 other products	9.8	11.09.2019
Critical	CVE-2018-8529	Microsoft Team: Remote Code Execution also in 1 other product	9.8	15.11.2018
Critical	CVE-2019-1072	Microsoft Team Foundation Server: Remote Code Execution also in 3 other products	9.8	15.07.2019
Medium	CVE-2019-0971	Microsoft Azure DevOps Server: Information Disclosure also in 2 other products	6.5	16.05.2019
Medium	CVE-2019-0647	Microsoft Team: Information Disclosure also in 1 other product	6.5	17.01.2019
Medium	CVE-2021-27067	Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability also in 3 other products	6.5	13.04.2021
High	CVE-2020-0758	Microsoft Azure DevOps Server: Privilege Escalation also in 3 other products	7.5	12.03.2020
Medium	CVE-2019-0866	Microsoft Team Foundation Server: Cross-Site Scripting (XSS) also in 3 other products	6.1	09.04.2019
Medium	CVE-2019-0870	Microsoft Team Foundation Server: Cross-Site Scripting (XSS) also in 2 other products	6.1	09.04.2019
Medium	CVE-2019-0871	Microsoft Team Foundation Server: Cross-Site Scripting (XSS) also in 2 other products	6.1	09.04.2019
Medium	CVE-2019-0868	Microsoft Team Foundation Server: Cross-Site Scripting (XSS) also in 2 other products	6.1	09.04.2019
Medium	CVE-2019-0867	Microsoft Azure DevOps Server: Cross-Site Scripting (XSS) also in 2 other products	6.1	09.04.2019
Medium	CVE-2019-0742	Microsoft Team Foundation Server 2018: Cross-Site Scripting (XSS) also in 1 other product	5.4	06.03.2019
Medium	CVE-2019-0743	Microsoft Team Foundation Server 2018: Cross-Site Scripting (XSS) also in 1 other product	5.4	06.03.2019
Medium	CVE-2018-8602	Microsoft Team: Cross-Site Scripting (XSS) also in 1 other product	5.4	14.11.2018
Medium	CVE-2019-0979	Microsoft Team Foundation Server: Cross-Site Scripting (XSS) also in 2 other products	5.4	16.05.2019
Medium	CVE-2019-0872	Microsoft Team Foundation Server: Cross-Site Scripting (XSS) also in 3 other products	5.4	16.05.2019
Medium	CVE-2019-0777	Microsoft Team Foundation Server: Cross-Site Scripting (XSS) also in 1 other product	5.4	09.04.2019
Medium	CVE-2019-1076	Microsoft Team Foundation Server 2018: Cross-Site Scripting (XSS) also in 2 other products	5.4	15.07.2019
Medium	CVE-2020-17145	Azure DevOps Server and Team Foundation Services Spoofing Vulnerability also in 3 other products	5.4	09.12.2020
Medium	CVE-2019-1305	Microsoft Team Foundation Server: Cross-Site Scripting (XSS) also in 3 other products	5.4	11.09.2019
Medium	CVE-2019-0646	Microsoft Team: Cross-Site Scripting (XSS) also in 1 other product	5.4	17.01.2019
Medium	CVE-2020-0700	Microsoft Azure DevOps Server: Cross-Site Scripting (XSS) also in 3 other products	5.4	12.03.2020

All products by Microsoft

Key figures

Vulnerabilities