| CVE-2025-59457 | 高7.7 | In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows | 17/09/2025 |
| CVE-2025-59456 | 中5.5 | In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload | 17/09/2025 |
| CVE-2025-59455 | 中4.2 | In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition | 17/09/2025 |
| CVE-2025-57734 | 中6.5 | In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files | 20/08/2025 |
| CVE-2025-57733 | 低3.8 | In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email content | 20/08/2025 |
| CVE-2025-57732 | 中6.3 | In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership | 20/08/2025 |
| CVE-2025-54538 | 中5.5 | In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command | 28/07/2025 |
| CVE-2025-54537 | 中5.5 | In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots | 28/07/2025 |
| CVE-2025-54536 | 高8.8 | In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint | 28/07/2025 |
| CVE-2025-54535 | 高7.5 | In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms | 28/07/2025 |
| CVE-2025-54534 | 中4.8 | In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page | 28/07/2025 |
| CVE-2025-54533 | 中4.3 | In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration | 28/07/2025 |
| CVE-2025-54532 | 中4.3 | In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies | 28/07/2025 |
| CVE-2025-54531 | 緊急9.4 | In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows | 28/07/2025 |
| CVE-2025-54530 | 緊急9.8 | In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions | 28/07/2025 |
| CVE-2025-54529 | 高7.5 | In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration | 28/07/2025 |
| CVE-2025-54528 | 高8.8 | In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow | 28/07/2025 |
| CVE-2025-52879 | 中4.8 | In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible | 23/06/2025 |
| CVE-2025-52878 | 中4.3 | In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions | 23/06/2025 |
| CVE-2025-52877 | 中4.8 | In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible | 23/06/2025 |