JetBrains TeamCity <2025.07

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical4high0medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-54534US	—	0.86% (59th)	—	no fix	2025-07-28	—
CVE-2025-54531US	critical9.4	0.31% (24th)	—	no fix	2025-07-28	—
CVE-2025-54538US	—OT elevated	0.27% (19th)	—	no fix	2025-07-28	—
CVE-2025-54537US	—OT elevated	0.27% (19th)	—	no fix	2025-07-28	—
CVE-2025-54533US	—OT elevated	0.24% (15th)	—	no fix	2025-07-28	—
CVE-2025-54532US	—OT elevated	0.24% (15th)	—	no fix	2025-07-28	—
CVE-2025-54530US	critical9.8OT elevated	0.19% (9th)	—	no fix	2025-07-28	—
CVE-2025-54535US	high7.5	0.19% (9th)	—	no fix	2025-07-28	—
CVE-2025-54536US	high8.8	0.17% (7th)	—	no fix	2025-07-28	—
CVE-2025-54528US	high8.8	0.17% (7th)	—	no fix	2025-07-28	—
CVE-2025-54529US	high7.5	0.14% (4th)	—	no fix	2025-07-28	—

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-312Cleartext Storage of Sensitive Information2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-23Relative Path Traversal1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-328Use of Weak Hash1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.