Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
MicrosoftAzure Devops

4 matches found

CVE
CVE•added 2025/05/08 10:17 p.m.•141 views

CVE-2025-29813

CVE-2025-29813 is an elevation of privilege vulnerability in Azure DevOps (Azure DevOps Server). The described flaw is an authentication bypass via assumed-immutable data / spoofable identity claims that could allow an unauthorized user to elevate privileges over the network. Connected sources co...

10CVSS8.5AI score0.01533EPSS
CVE
CVE•added 2025/07/18 5:4 p.m.•40 views

CVE-2025-47158

Azure DevOps vulnerability CVE-2025-47158: Authentication bypass by assumed-immutable data can allow a network attacker to elevate privileges. Affected product: Azure DevOps Server/Services. Root cause: bypass of authentication via assumed-immutable data in Azure DevOps. Impact: privilege escalat...

9CVSS6.5AI score0.00668EPSS
CVE
CVE•added 2026/05/07 8:59 p.m.•23 views

CVE-2026-42826

Technical details are not publicly available in the provided documents; no affected products/versions/vectors or remediation are specified here. Monitor for updates from official sources.

10CVSS5.8AI score0.0084EPSS
CVE
CVE•added 2026/03/19 9:6 p.m.•11 views

CVE-2026-23658

CVE-2026-23658 affects Microsoft Azure DevOps: msazure, with root cause described as insufficiently protected credentials enabling an unauthorized network-based privilege escalation. The description and multiple connected sources confirm impact to Azure DevOps components and privilege elevation, ...

9.8CVSS5.8AI score0.00781EPSS