CVE-2019-1076 PUBLISHED CVSS 3.5 LOW

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

EPSS 0.46% · 63.6th percentile

Risk Scores

CVSS v2.0
3.5
EPSS Score
0.46%
63.6th percentile

Affected Products

VendorProductVersions
MicrosoftAzure DevOps Server2019.0.1
microsoftazure_devops_server2019.0.1
MicrosoftTeam Foundation Server 2018Update 3.2
microsoftteam_foundation_server2018

Timeline

References

Open in Interactive Console →