Azure devops server
This hub aggregates every CVE we track for Azure devops server, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.
41
CVEs tracked
3
Critical
12
High
1
In CISA KEV
Severity distribution
MEDIUM26HIGH12CRITICAL3
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Azure devops server.
- CVE-2026-21512Azure DevOps Server Cross-Site Scripting Vulnerability6.5
- CVE-2024-35267Azure DevOps Server Spoofing Vulnerability7.6
- CVE-2024-35266Azure DevOps Server Spoofing Vulnerability7.6
- CVE-2024-20667Azure DevOps Server Remote Code Execution Vulnerability7.5
- CVE-2023-21751Azure DevOps Server Spoofing Vulnerability6.5
- CVE-2023-36561Azure DevOps Server Elevation of Privilege Vulnerability7.3
- CVE-2023-38155Azure DevOps Server Remote Code Execution Vulnerability7.0
- CVE-2023-33136Azure DevOps Server Remote Code Execution Vulnerability8.8
- CVE-2023-36869Azure DevOps Server Spoofing Vulnerability6.3
- CVE-2023-21565Azure DevOps Server Spoofing Vulnerability7.1
- CVE-2023-21569Azure DevOps Server Spoofing Vulnerability5.5
- CVE-2023-21553Azure DevOps Server Remote Code Execution Vulnerability7.5
- CVE-2023-21564Azure DevOps Server Cross-Site Scripting Vulnerability7.1
- CVE-2021-44228Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsKEV10.0
- CVE-2021-28459Azure DevOps Server Spoofing Vulnerability6.1
Product normalization is registry-driven with AI assist and human review. How it works