Microsoft Team
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-0647 | Foundation Server 2017 Update 3.1 ; Foundation Server 2018 Update 1.2 ; Foundation Server 2018 Update 3.2 | An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Fo | MEDIUM 6.5 | 4.6 % | ||
| CVE-2019-0646 | Foundation Server 2018 Update 3.2 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foun | MEDIUM 5.4 | 1.5 % | ||
| CVE-2018-8529 | Foundation Server 2018 Update 1.1 ; Foundation Server 2018 Update 3 | A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication betw | CRITICAL 9.8 | 13 % | ||
| CVE-2018-8602 | Foundation Server 2017 Update 3.1 ; Foundation Server 2018 Update 1.1 ; Foundation Server 2018 Update 3 ; … | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foun | MEDIUM 5.4 | 1.7 % |