What’s Vulnerable › Products

Microsoft Azure DevOps Server vulnerabilities

40 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Microsoft Azure DevOps Server version is affected

Latest Microsoft Azure DevOps Server vulnerabilities

• CVE-2026-21512 — Azure DevOps Server Cross-Site Scripting Vulnerability (CVSS 6.5)
• CVE-2024-35267 — Azure DevOps Server Spoofing Vulnerability (CVSS 7.6)
• CVE-2024-35266 — Azure DevOps Server Spoofing Vulnerability (CVSS 7.6)
• CVE-2024-20667 — Azure DevOps Server Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2023-21751 — Azure DevOps Server Spoofing Vulnerability (CVSS 6.5)
• CVE-2023-36561 — Azure DevOps Server Elevation of Privilege Vulnerability (CVSS 7.3)
• CVE-2023-38155 — Azure DevOps Server Remote Code Execution Vulnerability (CVSS 8.1)
• CVE-2023-33136 — Azure DevOps Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2023-36869 — Azure DevOps Server Spoofing Vulnerability (CVSS 6.3)
• CVE-2023-21569 — Azure DevOps Server Spoofing Vulnerability (CVSS 5.5)
• CVE-2023-21565 — Azure DevOps Server Spoofing Vulnerability (CVSS 7.1)
• CVE-2023-21553 — Azure DevOps Server Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2023-21564 — Azure DevOps Server Cross-Site Scripting Vulnerability (CVSS 7.1)
• CVE-2021-28459 — Azure DevOps Server Spoofing Vulnerability (CVSS 4.3)
• CVE-2021-27067 — Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability (CVSS 4.0)
• CVE-2020-17145 — Azure DevOps Server and Team Foundation Services Spoofing Vulnerability (CVSS 4.9)
• CVE-2020-17135 — Azure DevOps Server Spoofing Vulnerability (CVSS 4.9)
• CVE-2020-1325 — Azure DevOps Server and Team Foundation Services Spoofing Vulnerability (CVSS 5.5)
• CVE-2020-1326 — (CVSS 5.4)
• CVE-2020-1327 — (CVSS 6.1)
• CVE-2020-0815 — (CVSS 7.5)
• CVE-2020-0758 — (CVSS 7.5)
• CVE-2020-0700 — (CVSS 5.4)
• CVE-2019-1306 — (CVSS 9.8)
• CVE-2019-1305 — (CVSS 5.4)