CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0874

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.6%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-0874

Microsoft » Azure Devops Server » Version: 2019

cpe:2.3:o:microsoft:azure_devops_server:2019
Microsoft » Azure Devops Server » Version: 2019.0.1

cpe:2.3:o:microsoft:azure_devops_server:2019.0.1
Microsoft » Azure Devops Server » Version: 2019.1.2

cpe:2.3:o:microsoft:azure_devops_server:2019.1.2
Microsoft » Azure Devops Server » Version: 2020

cpe:2.3:o:microsoft:azure_devops_server:2020
Microsoft » Azure Devops Server » Version: 2020.0.1

cpe:2.3:o:microsoft:azure_devops_server:2020.0.1
Microsoft » Azure Devops Server » Version: 2020.1.2

cpe:2.3:o:microsoft:azure_devops_server:2020.1.2
Microsoft » Azure Devops Server » Version: 2022

cpe:2.3:o:microsoft:azure_devops_server:2022
Microsoft » Azure Devops Server » Version: 2022.0.1

cpe:2.3:o:microsoft:azure_devops_server:2022.0.1
Microsoft » Azure Devops Server » Version: 2022.0.2

cpe:2.3:o:microsoft:azure_devops_server:2022.0.2
Microsoft » Azure Devops Server » Version: 2022.1.0

cpe:2.3:o:microsoft:azure_devops_server:2022.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0874

Products

Pricing

Contact Us