Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:team_foundation_server:2015:4.2:*:*:*:*:*:*

part: a version: 2015 update: 4.2

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductTeam Foundation Server (8f808c77-9c7e-5674-936d-4868fafec80e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27067 vulnerable 2026-06-08 05:30:45.865527 Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
MEDIUM (6.5)
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
Published: 2021-04-13T19:32:37.000Z
Updated: 2024-08-03T20:40:47.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17145 vulnerable 2026-06-08 05:20:56.268014 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
MEDIUM (5.4)
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
Published: 2020-12-09T23:36:56.000Z
Updated: 2026-06-09T18:08:15.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1305 vulnerable 2026-06-08 05:13:25.575828 Details available
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
Published: 2019-09-11T21:25:01.000Z
Updated: 2024-08-04T18:13:30.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1072 vulnerable 2026-06-08 05:13:24.696997 Details available
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
Published: 2019-07-15T18:56:20.000Z
Updated: 2024-08-04T18:06:31.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0872 vulnerable 2026-06-08 05:12:20.902408 Details available
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.
Published: 2019-05-16T18:17:01.000Z
Updated: 2024-08-04T17:58:59.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0866 vulnerable 2026-06-08 05:12:20.899827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.