CVE-2019-1306

CVE-2019-1306: vulnerability in Microsoft Azure DevOps Server

Published · Updated

Follow this CVE+ Monitor Azure DevOps Server+ Monitor Team Foundation Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 17%
A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.
Affected products
Microsoft · Azure DevOps ServerMicrosoft · Azure DevOps Server 2019 Update 1Microsoft · Team Foundation Server 2018
Related CVEs — Microsoft Azure DevOps Server

In the same product, most dangerous first.

CVE-2019-1072—CVE-2019-1072EPSS 13.4%CVE-2019-0971—CVE-2019-0971EPSS 8.5%CVE-2019-0857—CVE-2019-0857EPSS 3.9%CVE-2019-0875—CVE-2019-0875EPSS 3.0%CVE-2021-27067MEDIUMAzure DevOps Server and Team Foundation Server Information Disclosure VulnerabilityEPSS 2.8%CVE-2019-0866—CVE-2019-0866EPSS 2.6%