| CVE-2024-56353 | 中6.5 | In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies | 20/12/2024 |
| CVE-2024-56352 | 中5.4 | In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page | 20/12/2024 |
| CVE-2024-56351 | 高8.8 | In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles | 20/12/2024 |
| CVE-2024-56350 | 中4.3 | In JetBrains TeamCity before 2024.12 build credentials allowed unauthorized viewing of projects | 20/12/2024 |
| CVE-2024-56349 | 中5.3 | In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs | 20/12/2024 |
| CVE-2024-56348 | 中4.3 | In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents | 20/12/2024 |
| CVE-2024-47951 | 中5.4 | In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings | 08/10/2024 |
| CVE-2024-47950 | 中5.4 | In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings | 08/10/2024 |
| CVE-2024-47949 | 高7.5 | In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location | 08/10/2024 |
| CVE-2024-47948 | 高7.5 | In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups | 08/10/2024 |
| CVE-2024-47161 | 中6.5 | In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API | 08/10/2024 |
| CVE-2024-43810 | 中5.4 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin | 16/08/2024 |
| CVE-2024-43809 | 中6.1 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page | 16/08/2024 |
| CVE-2024-43808 | 中5.4 | In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin | 16/08/2024 |
| CVE-2024-43807 | 中5.4 | In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page | 16/08/2024 |
| CVE-2024-43114 | 高7.8 | In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions | 06/08/2024 |
| CVE-2024-41829 | 高7.5 | In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection | 22/07/2024 |
| CVE-2024-41828 | 中6.5 | In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time | 22/07/2024 |
| CVE-2024-41827 | 緊急9.8 | In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration | 22/07/2024 |
| CVE-2024-41826 | 中4.8 | In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page | 22/07/2024 |