Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:azure_devops_server:2019:update1:*:*:*:*:*:*

part: o version: 2019 update: update1

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductAzure Devops Server (92fbe640-0502-5a3a-9889-9c341b4e4a5d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27067 vulnerable 2026-06-08 05:30:45.866298 Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
MEDIUM (6.5)
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
Published: 2021-04-13T19:32:37.000Z
Updated: 2024-08-03T20:40:47.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1327 vulnerable 2026-06-08 05:20:59.728035 Details available
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
Published: 2020-06-09T19:44:10.000Z
Updated: 2024-08-04T06:32:01.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1326 vulnerable 2026-06-08 05:20:59.726224 Details available
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
Published: 2020-07-14T22:54:02.000Z
Updated: 2024-08-04T06:32:00.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0758 vulnerable 2026-06-08 05:16:33.106577 Details available
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
Published: 2020-03-12T15:48:05.000Z
Updated: 2024-08-04T06:11:05.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1306 vulnerable 2026-06-08 05:13:25.580858 Details available
A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.
Published: 2019-09-11T21:25:01.000Z
Updated: 2024-08-04T18:13:30.435Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.