PT-2019-2164

Name of the Vulnerable Software and Affected Versions Azure DevOps Server and Team Foundation Server affected versions not specified Description A Cross-site Scripting XSS issue exists due to improper sanitization of user-provided input. This allows a remote attacker to perform cross-site scripti...

KLA11485 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A deni...

PT-2019-2258

Name of the Vulnerable Software and Affected Versions Team Foundation Server and Azure DevOps Server affected versions not specified Description The issue arises due to inadequate protection of the web page structure in Team Foundation Server and Azure DevOps Server. This allows a remote attacker...

Microsoft Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

Description Microsoft Azure DevOps Server and Team Foundation Server are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Azure DevOps Server 2019 Microsoft...

Azure DevOps Server Team Foundation Server Data Compromise

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

Azure DevOps Server Team Foundation Server Data Compromise

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

Azure DevOps Server Data Compromise

The vulnerability of the Azure DevOps Server software development tools exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially...

Azure DevOps Server XSS

The vulnerability of Azure DevOps Server and Team Foundation Server lies in the lack of measures for input sanitization. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

Azure DevOps Server Team Foundation Server Data Compromise

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

Azure DevOps Server XSS

The vulnerability of Azure DevOps Server lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Azure DevOps Server Privilege Escalation

The vulnerability of the Azure DevOps Server development tool is related to insufficient verification of access rights to projects. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Azure DevOps Server Input Validation

The vulnerability of the Azure DevOps Server software development tools exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of protected information by sending specially crafted payloads ...

Azure DevOps Server Team Foundation Server Data Compromise

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-09615)

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

Azure DevOps Server Cross-Site Scripting Vulnerability

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A cross-site scripting vulnerability exists in Microsoft Azure DevOps Server 2019, whi...

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-09616)

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-09614)

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

Azure DevOps Server Elevation of Privilege Vulnerability

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. An elevation of privilege vulnerability exists in Microsoft Azure DevOps Server 2019,...

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-09617)

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...