| CVE-2020-11688 | 高7.5 | In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. | 22/04/2020 |
| CVE-2020-11687 | 高7.5 | In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. | 22/04/2020 |
| CVE-2020-11686 | 低2.7 | In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. | 22/04/2020 |
| CVE-2020-11685 | 高7.5 | In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS. | 22/04/2020 |
| CVE-2020-11416 | 中5.4 | JetBrains Space through 2020-04-22 allows stored XSS in Chats. | 22/04/2020 |
| CVE-2020-11694 | 高7.5 | In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3. | 10/04/2020 |
| CVE-2020-7907 | 高7.5 | In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections. | 21/02/2020 |
| CVE-2020-7914 | 高7.5 | In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3. | 31/01/2020 |
| CVE-2020-7913 | 中6.1 | JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description. | 30/01/2020 |
| CVE-2020-7912 | 中5.3 | In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups. | 30/01/2020 |
| CVE-2020-7911 | 中6.1 | In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS. | 30/01/2020 |
| CVE-2020-7910 | 中5.4 | JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role. | 30/01/2020 |
| CVE-2020-7909 | 高7.5 | In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI. | 30/01/2020 |
| CVE-2020-7908 | 中4.3 | In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages. | 30/01/2020 |
| CVE-2020-7906 | 高7.5 | In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3. | 30/01/2020 |
| CVE-2020-7905 | 高7.5 | Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network. | 30/01/2020 |
| CVE-2020-7904 | 高7.4 | In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS. | 30/01/2020 |
| CVE-2020-5207 | 高7.5 | In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator. | 27/01/2020 |
| CVE-2019-18412 | 高7.5 | JetBrains IDETalk plugin before version 193.4099.10 allows XXE | 15/01/2020 |
| CVE-2019-19389 | 中5.4 | JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting. | 26/12/2019 |