Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:azure_devops_server_2019_update_1.1:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductAzure Devops Server 2019 Update 1.1 (52946349-8aa9-5cd0-8b56-56ba3ba2813f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1327 vulnerable 2026-06-08 05:20:59.727873 Details available
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
Published: 2020-06-09T19:44:10.000Z
Updated: 2024-08-04T06:32:01.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1326 vulnerable 2026-06-08 05:20:59.724902 Details available
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
Published: 2020-07-14T22:54:02.000Z
Updated: 2024-08-04T06:32:00.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17145 vulnerable 2026-06-08 05:20:56.260471 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
MEDIUM (5.4)
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
Published: 2020-12-09T23:36:56.000Z
Updated: 2026-06-09T18:08:15.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17135 vulnerable 2026-06-08 05:20:56.192939 Azure DevOps Server Spoofing Vulnerability
MEDIUM (6.4)
Azure DevOps Server Spoofing Vulnerability
Published: 2020-12-09T23:36:51.000Z
Updated: 2026-06-09T18:07:52.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0815 vulnerable 2026-06-08 05:16:33.345206 Details available
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0758.
Published: 2020-03-12T15:48:27.000Z
Updated: 2024-08-04T06:18:03.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0758 vulnerable 2026-06-08 05:16:33.033942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0700 vulnerable 2026-06-08 05:16:32.876215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.