CVE-2019-15038

HIGH 7.5CVE-2019-15038 · Published 01/10/2019 · updated 17/06/2026

In short

CVE-2019-15038 is a HIGH (CVSS 7.5) vulnerability affecting teamcity (jetbrains).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
teamcity jetbrains	`= 2018.2.4`	No fix yet

Description

An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some security-related HTTP headers. The issue was fixed in TeamCity 2019.1.

References

blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019 · Vendor Advisory

More vulnerabilities in teamcity

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free