GCVE - cpe:2.3:o:microsoft:azure_devops_server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:azure_devops_server:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Azure Devops Server (`92fbe640-0502-5a3a-9889-9c341b4e4a5d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-21512`	vulnerable	2026-06-08 07:49:16.461531	Azure DevOps Server Cross-Site Scripting Vulnerability MEDIUM (6.5) Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network. Published: 2026-02-10T17:51:16.670Z Updated: 2026-05-11T21:25:15.584Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21512	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38155`	vulnerable	2026-06-08 06:08:17.064297	Azure DevOps Server Remote Code Execution Vulnerability HIGH (7) Azure DevOps Server Remote Code Execution Vulnerability Published: 2023-09-12T16:58:37.646Z Updated: 2025-10-30T18:18:06.568Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38155	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36869`	vulnerable	2026-06-08 06:08:14.408714	Azure DevOps Server Spoofing Vulnerability MEDIUM (6.3) Azure DevOps Server Spoofing Vulnerability Published: 2023-08-08T17:08:19.962Z Updated: 2025-01-01T01:59:07.427Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36869	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33136`	vulnerable	2026-06-08 06:06:21.635900	Azure DevOps Server Remote Code Execution Vulnerability HIGH (8.8) Azure DevOps Server Remote Code Execution Vulnerability Published: 2023-09-12T16:58:34.967Z Updated: 2025-10-30T18:17:40.891Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33136	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0996`	vulnerable	2026-06-08 05:12:21.323034	Azure DevOps Server Spoofing Vulnerability A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery. An attacker who successfully exploited this vulnerability could bypass OAuth protections and register an application on behalf of the targeted user. To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request. The attacker would then need to convince a targeted user to click a link to the malicious page. The update addresses the vulnerability by modifying how Azure DevOps Server protects application registration requests. Published: 2019-06-12T13:49:39.000Z Updated: 2025-05-20T17:50:02.804Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0996	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0874`	vulnerable	2026-06-08 05:12:20.907200	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.