Approved changes feed: RSS · Atom

cpe:2.3:a:jetbrains:teamcity:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorJetbrains (b1b7db7a-bd16-5477-8e89-fb64c5636fcd)
ProductTeamcity (7b9540cf-6355-5a98-8cf5-3933af175178)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36470 vulnerable 2026-06-08 06:39:45.053981 Details available
HIGH (8.1)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases
Published: 2024-05-29T13:29:07.173Z
Updated: 2024-08-02T03:37:05.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36376 vulnerable 2026-06-08 06:39:44.593890 Details available
MEDIUM (6.5)
In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissions
Published: 2024-05-29T13:29:05.793Z
Updated: 2024-08-02T03:37:05.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36370 vulnerable 2026-06-08 06:39:44.591433 Details available
MEDIUM (4.6)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible
Published: 2024-05-29T13:29:02.650Z
Updated: 2024-08-02T03:37:05.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36365 vulnerable 2026-06-08 06:39:44.589030 Details available
MEDIUM (6.8)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent
Published: 2024-05-29T13:28:59.445Z
Updated: 2024-08-02T03:37:05.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29880 vulnerable 2026-06-08 06:33:29.484630 Details available
MEDIUM (4.2)
In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process
Published: 2024-03-21T13:56:45.387Z
Updated: 2024-08-02T01:17:58.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28174 vulnerable 2026-06-08 06:33:26.652048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24942 vulnerable 2026-06-08 06:29:42.092896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24938 vulnerable 2026-06-08 06:29:42.088725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23917 vulnerable 2026-06-08 06:29:40.938478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.