| CVE-2020-15828 | 中6.5 | In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions. | 08/08/2020 |
| CVE-2020-15827 | 高7.5 | In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file. | 08/08/2020 |
| CVE-2020-15826 | 中4.3 | In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have. | 08/08/2020 |
| CVE-2020-15825 | 高8.8 | In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges. | 08/08/2020 |
| CVE-2020-15824 | 高8.8 | In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default. | 08/08/2020 |
| CVE-2020-15823 | 高7.5 | JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component. | 08/08/2020 |
| CVE-2020-15821 | 中6.5 | In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft. | 08/08/2020 |
| CVE-2020-15820 | 中5.3 | In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence. | 08/08/2020 |
| CVE-2020-15819 | 中5.3 | JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports. | 08/08/2020 |
| CVE-2020-15818 | 中5.3 | In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence. | 08/08/2020 |
| CVE-2020-15817 | 高8.8 | In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues. | 08/08/2020 |
| CVE-2019-19704 | 高7.5 | In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm. | 08/08/2020 |
| CVE-2020-11938 | 中4.9 | In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. The issue was resolved in 2019.2.2. | 22/04/2020 |
| CVE-2020-11796 | 緊急9.8 | In JetBrains Space through 2020-04-22, the password authentication implementation was insecure. | 22/04/2020 |
| CVE-2020-11795 | 高7.5 | In JetBrains Space through 2020-04-22, the session timeout period was configured improperly. | 22/04/2020 |
| CVE-2020-11693 | 高7.5 | JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue. | 22/04/2020 |
| CVE-2020-11692 | 低2.7 | In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators. | 22/04/2020 |
| CVE-2020-11691 | 高7.5 | In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible. | 22/04/2020 |
| CVE-2020-11690 | 緊急9.8 | In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases. | 22/04/2020 |
| CVE-2020-11689 | 中6.5 | In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file. | 22/04/2020 |