CVE-2019-1072

CVE-2019-1072: vulnerability in Microsoft Azure DevOps Server

Published · Updated

Follow this CVE+ Monitor Azure DevOps Server+ Monitor Team Foundation Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 13%
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
Affected products
Microsoft · Azure DevOps ServerMicrosoft · Team Foundation ServerMicrosoft · Team Foundation Server 2010Microsoft · Team Foundation Server 2012Microsoft · Team Foundation Server 2013 Update 5Microsoft · Team Foundation Server 2015Microsoft · Team Foundation Server 2018
Related CVEs — Microsoft Azure DevOps Server

In the same product, most dangerous first.

CVE-2019-1306—CVE-2019-1306EPSS 17.0%CVE-2019-0971—CVE-2019-0971EPSS 8.5%CVE-2019-0857—CVE-2019-0857EPSS 3.9%CVE-2019-0875—CVE-2019-0875EPSS 3.0%CVE-2019-0866—CVE-2019-0866EPSS 2.6%CVE-2019-0871—CVE-2019-0871EPSS 2.4%