microsoft team foundation server

Name: microsoft team foundation server
Brand: microsoft

productUS

cpe:2.3:a:microsoft:team_foundation_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

3critical1high19medium0low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-1306US	critical9.8	17.0% (97th)	—	no fix	2019-09-11	= 2018
CVE-2018-8529US	critical9.8	13.5% (96th)	—	no fix	2018-11-15	= 2018
CVE-2019-1072US	critical9.8	13.4% (96th)	—	no fix	2019-07-15	6 versions
CVE-2019-0971US	medium6.5	8.46% (95th)	—	no fix	2019-05-16	= 2018
CVE-2019-0647US	medium6.5	4.61% (92nd)	—	no fix	2019-01-17	2 versions
CVE-2021-27067US	medium4.0	2.65% (86th)	—	no fix	2021-04-13	3 versions
CVE-2019-0866US	medium6.1	2.63% (85th)	—	no fix	2019-04-09	3 versions
CVE-2019-0871US	medium6.1	2.42% (84th)	—	no fix	2019-04-09	2 versions
CVE-2019-0870US	medium6.1	2.42% (84th)	—	no fix	2019-04-09	2 versions
CVE-2019-0868US	medium6.1	2.42% (84th)	—	no fix	2019-04-09	2 versions
CVE-2019-0867US	medium6.1	2.39% (84th)	—	no fix	2019-04-09	= 2018
CVE-2020-0758US	high7.5	2.02% (81st)	—	no fix	2020-03-12	2 versions
CVE-2019-0743US	medium5.4	1.77% (78th)	—	no fix	2019-03-05	= 2018
CVE-2019-0742US	medium5.4	1.77% (78th)	—	no fix	2019-03-05	= 2018
CVE-2018-8602US	medium5.4	1.71% (77th)	—	no fix	2018-11-14	2 versions
CVE-2019-0979US	medium5.4	1.70% (77th)	—	no fix	2019-05-16	2 versions
CVE-2019-0872US	medium5.4	1.70% (77th)	—	no fix	2019-05-16	3 versions
CVE-2019-0777US	medium5.4	1.70% (77th)	—	no fix	2019-04-09	2 versions
CVE-2019-1076US	medium5.4	1.63% (76th)	—	no fix	2019-07-15	= 2018
CVE-2020-17145US	medium4.9	1.55% (75th)	—	no fix	2020-12-10	3 versions
CVE-2019-1305US	medium5.4	1.54% (75th)	—	no fix	2019-09-11	3 versions
CVE-2019-0646US	medium5.4	1.46% (73rd)	—	no fix	2019-01-17	= 2018
CVE-2020-0700US	medium5.4	1.33% (71st)	—	no fix	2020-03-12	2 versions

weaknesses (7)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')15 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan