CVE-2026-21512
Published Feb 10, 2026Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.
- evidence mentions
- 2
- Buzz score
- 21.0
Vendor/product archive
microsoft / azure_devops_server CVEs
Beta · best-effort40 CVEs tagged to microsoft / azure_devops_server — 2 Critical, 12 High, 26 Medium, 0 Low, 0 Unrated.
CVE-2024-35267
Published Jul 9, 2024Azure DevOps Server Spoofing Vulnerability
CVE-2024-35266
Published Jul 9, 2024Azure DevOps Server Spoofing Vulnerability
CVE-2024-20667
Published Feb 13, 2024Azure DevOps Server Remote Code Execution Vulnerability
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-21751
Published Dec 14, 2023Azure DevOps Server Spoofing Vulnerability
CVE-2023-36561
Published Oct 10, 2023Azure DevOps Server Elevation of Privilege Vulnerability
CVE-2023-38155
Published Sep 12, 2023Azure DevOps Server Remote Code Execution Vulnerability
CVE-2023-33136
Published Sep 12, 2023Azure DevOps Server Remote Code Execution Vulnerability
CVE-2023-36869
Published Aug 8, 2023Azure DevOps Server Spoofing Vulnerability
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-21569
Published Jun 14, 2023Azure DevOps Server Spoofing Vulnerability
CVE-2023-21565
Published Jun 14, 2023Azure DevOps Server Spoofing Vulnerability
CVE-2023-21553
Published Feb 14, 2023Azure DevOps Server Remote Code Execution Vulnerability
- evidence mentions
- 1
CVE-2023-21564
Published Feb 14, 2023Azure DevOps Server Cross-Site Scripting Vulnerability
- evidence mentions
- 1
CVE-2021-28459
Published Apr 13, 2021Azure DevOps Server Spoofing Vulnerability
CVE-2021-27067
Published Apr 13, 2021Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
CVE-2020-17145
Published Dec 10, 2020Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-17135
Published Dec 10, 2020Azure DevOps Server Spoofing Vulnerability
CVE-2020-1325
Published Nov 11, 2020Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-1326
Published Jul 14, 2020A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerabil…
CVE-2020-1327
Published Jun 9, 2020A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
CVE-2020-0815
Published Mar 12, 2020An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Found…
CVE-2020-0758
Published Mar 12, 2020An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Found…
CVE-2020-0700
Published Mar 12, 2020A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerabil…
CVE-2019-1306
Published Sep 11, 2019A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-1305
Published Sep 11, 2019A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vuln…
Showing 1-25 of 40 CVEsPage 1 of 2