KLA11459 Multiple vulnerabilities in Microsoft Developer Tools

🗓️ 09 Apr 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 44 Views

Multiple vulnerabilities in Microsoft Developer Tools. Exploitable vulnerabilities include XSS, information disclosure, denial of service, elevation of privilege, and spoofing

Reporter	Title	Published	Views	Family All 119
BDU FSTEC	The vulnerability of the ASP.NET Core software platform, related to errors in handling web requests, allows attackers to cause service failures.	17 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure DevOps Server software development tools’ setup arises from insufficient validation of input data. This allows attackers to compromise the integrity of the protected information.	19 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.	19 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.	19 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.	19 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure DevOps Server software development tools’ setup exists due to the lack of measures taken to neutralize specific elements. This vulnerability allows attackers to compromise the confidentiality and integrity of the protected information.	19 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.	19 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Azure DevOps Server and Team Foundation Server allow attackers to perform cross-site scripting attacks.	19 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure DevOps Server software lies in the lack of measures for cleaning input data, allowing attackers to execute cross-site scripting attacks.	19 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure DevOps Server software lies in the insufficient verification of access rights to projects, which allows a malicious individual to increase their privileges.	19 Apr 201900:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0870
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0874
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0869
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0876
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0867
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0866
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0815
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0871
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0875
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0857

22 Jan 2024 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 37.5

CVSS 3.15.5

EPSS0.06972