KLA11485 Multiple vulnerabilities in Microsoft Developer Tools

🗓️ 14 May 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 70 Views

Multiple vulnerabilities in Microsoft Developer Tools. Vulnerabilities can cause DoS, UI spoofing, privileges gain, security bypass, sensitive data disclosure

Reporter	Title	Published	Views	Family All 230
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Robotic Process Automation may be affected by multiple vulnerabilities in open source components (CVE-2019-0820, CVE-2020-15522, CVE-2021-43569)	27 Jun 202216:39	–	ibm
BDU FSTEC	The vulnerability of the Microsoft .NET Framework software platform, related to buffer overflows, allows attackers to trigger a service failure.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Azure DevOps Server and Team Foundation Server software lies in the lack of measures for input data cleansing, which allows attackers to execute cross-site scripting attacks.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerability of .NET Core and Microsoft .NET Framework software platforms, related to errors in regular expression processing, allowing attackers to trigger service failures.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Team Foundation Server and Azure DevOps Server software development tools lies in the lack of protection for service data. This allows attackers to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NuGet package management system, related to deficiencies in access control, allows a perpetrator to compromise the integrity of the protected information.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Team Foundation Server and Azure DevOps Server software lies in the lack of security measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks and execute arbitrary code in the context of the current user.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks, related to errors in request processing, allowing attackers to trigger service failures.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks, related to errors in request processing, allowing attackers to trigger service failures.	14 Jun 201900:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0864
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0979
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0727
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0820
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0976
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1000
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0982
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0980
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0733
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-0872

22 Jan 2024 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 29

CVSS 37.8

CVSS 3.17.5

EPSS0.08464