← CVE Intelligence

CVE-2019-0872

Microsoft / Team Foundation Server PUBLISHED

Description (CNA)

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.

Affected (CNA)

Vendor / productVersions
Microsoft / Team Foundation Serveraffected 2017 Update 3.1
Microsoft / Team Foundation Server 2018affected Update 1.2; affected Update 3.2
Microsoft / Azure DevOps Serveraffected 2019
Microsoft / Team Foundation Server 2015affected Update 4.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.