Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:azure_devops_server:2019.0.1:*:*:*:*:*:*:*

part: o version: 2019.0.1 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductAzure Devops Server (92fbe640-0502-5a3a-9889-9c341b4e4a5d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38155 vulnerable 2026-06-08 06:08:17.070589 Azure DevOps Server Remote Code Execution Vulnerability
HIGH (7)
Azure DevOps Server Remote Code Execution Vulnerability
Published: 2023-09-12T16:58:37.646Z
Updated: 2025-10-30T18:18:06.568Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27067 vulnerable 2026-06-08 05:30:45.862408 Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
MEDIUM (6.5)
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
Published: 2021-04-13T19:32:37.000Z
Updated: 2024-08-03T20:40:47.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1327 vulnerable 2026-06-08 05:20:59.728193 Details available
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
Published: 2020-06-09T19:44:10.000Z
Updated: 2024-08-04T06:32:01.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1326 vulnerable 2026-06-08 05:20:59.727405 Details available
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
Published: 2020-07-14T22:54:02.000Z
Updated: 2024-08-04T06:32:00.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0758 vulnerable 2026-06-08 05:16:33.107190 Details available
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
Published: 2020-03-12T15:48:05.000Z
Updated: 2024-08-04T06:11:05.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0700 vulnerable 2026-06-08 05:16:32.879201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1306 vulnerable 2026-06-08 05:13:25.580900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1305 vulnerable 2026-06-08 05:13:25.576087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1076 vulnerable 2026-06-08 05:13:24.713091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1072 vulnerable 2026-06-08 05:13:24.702472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.