CVE-2019-0867

MEDIO 6.1CVE-2019-0867 · Published 09/04/2019 · updated 17/06/2026

In breve

CVE-2019-0867 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda team foundation server (microsoft).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.4%, superiore al 83.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
team foundation server microsoft	`= 2018`	No fix yet

Description

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871.

References

securityfocus.com/bid/107752 · Third Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0867 · Patch

Altre vulnerabilità di team foundation server

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

team foundation server

microsoft

= 2018

No fix yet

Description

Altre vulnerabilità di team foundation server

Vedi tutto →