A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Azure DevOps Server
Vendor
Microsoft
Product
Azure DevOps Server
Platforms
Unknown
Default status
Unknown
Azure DevOps Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2019.0.1
affected
Unavailable
Unavailable
Unavailable
None listed
Team Foundation Server 2018
Vendor
Microsoft
Product
Team Foundation Server 2018
Platforms
Unknown
Default status
Unknown
Team Foundation Server 2018 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Update 3.2
affected
Unavailable
Unavailable
Unavailable
None listed
Update 1.2
affected
Unavailable
Unavailable
Unavailable
None listed
Team Foundation Server
Vendor
Microsoft
Product
Team Foundation Server
Platforms
Unknown
Default status
Unknown
Team Foundation Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2017 Update 3.1
affected
Unavailable
Unavailable
Unavailable
None listed
Azure DevOps Server 2019
Vendor
Microsoft
Product
Azure DevOps Server 2019
Platforms
Unknown
Default status
Unknown
Azure DevOps Server 2019 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Update 1
affected
Unavailable
Unavailable
Unavailable
None listed
Azure DevOps Server 2019 Update 1.1
Vendor
Microsoft
Product
Azure DevOps Server 2019 Update 1.1
Platforms
Unknown
Default status
Unknown
Azure DevOps Server 2019 Update 1.1 · Scoped product and version facts