VendorsMicrosoftteam_foundation_server2015
Vulnerabilities

Microsoft Team Foundation Server 2015

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

6CVEs
CVE-2019-1072
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
Published 2019-07-15 · Modified
9.8EPSS 0.134
CVE-2021-27067
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
Published 2021-04-13 · Modified
6.5EPSS 0.028
CVE-2019-0866
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871.
Published 2019-04-09 · Modified
6.1EPSS 0.026
CVE-2019-0872
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.
Published 2019-05-16 · Modified
5.4EPSS 0.017
CVE-2020-17145
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
Published 2020-12-09 · Modified
5.4EPSS 0.016
CVE-2019-1305
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
Published 2019-09-11 · Modified
5.4EPSS 0.015