VDB
CVE-2019-1076
CVE-2019-1076
PUBLISHED
CVSS 3.5 LOW
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
EPSS 0.46% · 64.2th percentile
Risk Scores
CVSS 2.0
3.5
EPSS Score
0.46%
64.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Azure DevOps Server | 2019.0.1 |
| microsoft | azure_devops_server | 2019.0.1 |
| Microsoft | Team Foundation Server 2018 | Update 3.2 |
| microsoft | team_foundation_server | 2018 |
Exploit Intelligence
Timeline
- Jul 10, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Nov 6, 2022 EPSS Score