VDB

CVE-2024-20667

CVE-2024-20667 PUBLISHED CVSS 8.699999809265137 HIGH

Microsoft ASP.NET (Active Server Pages .NET) ist eine Technologie zum Erstellen dynamischer Webseiten, Webanwendungen und Webservices auf Basis des Microsoft .NET-Frameworks. Microsoft Azure DevOps Server ist eine Plattform für kollaborative Softwareprojekte. Microsoft Visual Studio ist eine integrierte Entwicklungsumgebung für Hochsprachen.

EPSS 1.36% · 69.1th percentile

Risk Scores

CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
1.36%
69.1th percentile

Affected Products

VendorProductVersions
MicrosoftMicrosoft Azure DevOps Server 2022.1
MicrosoftMicrosoft Azure DevOps Server 2019.1.2
Red HatRed Hat Enterprise Linux
MicrosoftMicrosoft Visual Studio 2022 version 17.8
MicrosoftMicrosoft Azure Active Directory B2C
MicrosoftMicrosoft Azure DevOps Server 2020.1.2
MicrosoftMicrosoft Visual Studio 2022 version 17.4
MicrosoftMicrosoft Azure Connected Machine Agent
OracleOracle Linux
MicrosoftMicrosoft Azure Stack Hub
RESFRESF Rocky Linux
MicrosoftMicrosoft ASP.NET Core 6.0
MicrosoftMicrosoft ASP.NET Core 7.0
MicrosoftMicrosoft ASP.NET Core 8.0
MicrosoftMicrosoft Azure File Sync v17.0
MicrosoftMicrosoft Azure File Sync v15.0
MicrosoftMicrosoft Azure File Sync v14.0
MicrosoftMicrosoft Azure Site Recovery
MicrosoftMicrosoft Azure Kubernetes Service Confidential Containers
MicrosoftMicrosoft Azure File Sync v16.0

…and 1 more

Timeline

  • Feb 13, 2024 CVE Published
  • Feb 13, 2024 PoC Published
  • Feb 14, 2024 EPSS Score
  • Mar 12, 2024 EPSS Score
  • Apr 2, 2024 CVE Updated
  • Apr 8, 2024 EPSS Score
  • Jun 1, 2024 EPSS Score
  • Jun 29, 2024 EPSS Score
  • Jul 26, 2024 EPSS Score
  • Aug 22, 2024 EPSS Score
  • Sep 18, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score

References

…and 6 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›