Microsoft Azure DevOps Server 2022
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-21512 | 20230131.0 – < 20260204.3 | Azure DevOps Server Cross-Site Scripting Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2024-35267 | 20231128.1 – < 20240702.1 | Azure DevOps Server Spoofing Vulnerability | HIGH 7.6 | 1.6 % | ||
| CVE-2024-35266 | 20231128.1 – < 20240702.1 | Azure DevOps Server Spoofing Vulnerability | HIGH 7.6 | 1.6 % | ||
| CVE-2024-20667 | 20231128.1 – < 20240126.4 | Azure DevOps Server Remote Code Execution Vulnerability | HIGH 7.5 | 1.4 % | ||
| CVE-2023-21751 | 20231128.1 – < 20231128.1 | Azure DevOps Server Spoofing Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2023-21569 | 20230131.0 – < 20230602.4 | Azure DevOps Server Spoofing Vulnerability | MEDIUM 5.5 | 0.7 % | ||
| CVE-2023-21565 | 20230131.0 – < 20230602.4 | Azure DevOps Server Spoofing Vulnerability | HIGH 7.1 | 0.9 % | ||
| CVE-2023-21564 | 20230131.0 – < 20230131.1 | Azure DevOps Server Cross-Site Scripting Vulnerability | HIGH 7.1 | 0.9 % |