Sploitus

2 exploited vulnerabilities in Azure Devops Server

Vulnerabilities with publicly known exploits

Vendors
Microsoft
With known exploits
2
Affected Microsoft Team Foundation Server versions
= 2018
Affected Microsoft Azure Devops Server versions
= 2019, 2019.0.1, 2020.0.1

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2019-1306 1 exploit
CVSS 10.0 CRITICAL 2019-09-10
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari
CVE-2021-28459 2 exploits
CVSS 6.4 MEDIUM 2021-04-13
Microsoft Azure DevOps Server 2020.0.1 Cross Site Scripting VulnerabilityMicrosoft Azure DevOps Server 2020.0.1 Cross Site Scripting