Total
257 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-47852 | 1 Jetbrains | 1 Teamcity | 2025-05-28 | N/A | 4.8 MEDIUM |
|
In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible
|
|||||
| CVE-2025-47853 | 1 Jetbrains | 1 Teamcity | 2025-05-28 | N/A | 4.8 MEDIUM |
|
In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible
|
|||||
| CVE-2025-47854 | 1 Jetbrains | 1 Teamcity | 2025-05-28 | N/A | 4.3 MEDIUM |
|
In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page
|
|||||
| CVE-2025-26492 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | N/A | 7.7 HIGH |
|
In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources
|
|||||
| CVE-2025-26493 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | N/A | 4.6 MEDIUM |
|
In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab
|
|||||
| CVE-2025-31139 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | N/A | 4.3 MEDIUM |
|
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log
|
|||||
| CVE-2025-31140 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | N/A | 4.6 MEDIUM |
|
In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page
|
|||||
| CVE-2025-31141 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | N/A | 2.7 LOW |
|
In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page
|
|||||
| CVE-2025-46432 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | N/A | 4.3 MEDIUM |
|
In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs
|
|||||
| CVE-2025-46433 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | N/A | 4.9 MEDIUM |
|
In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible
|
|||||
| CVE-2025-46618 | 1 Jetbrains | 1 Teamcity | 2025-05-16 | N/A | 3.5 LOW |
|
In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab
|
|||||
| CVE-2014-10036 | 1 Jetbrains | 1 Teamcity | 2025-04-12 | 4.3 MEDIUM | N/A |
|
Cross-site scripting (XSS) vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to inject arbitrary web script or HTML via the cameFromUrl parameter to feed/generateFeedUrl.html.
|
|||||
| CVE-2014-10002 | 1 Jetbrains | 1 Teamcity | 2025-04-12 | 5.0 MEDIUM | N/A |
|
Unspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain sensitive information via unknown vectors.
|
|||||
| CVE-2024-36371 | 1 Jetbrains | 1 Teamcity | 2025-02-07 | N/A | 4.6 MEDIUM |
|
In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible
|
|||||
| CVE-2024-36470 | 1 Jetbrains | 1 Teamcity | 2025-02-07 | N/A | 8.1 HIGH |
|
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases
|
|||||
| CVE-2025-24461 | 1 Jetbrains | 1 Teamcity | 2025-01-30 | N/A | 6.5 MEDIUM |
|
In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint
|
|||||
| CVE-2025-24460 | 1 Jetbrains | 1 Teamcity | 2025-01-30 | N/A | 4.3 MEDIUM |
|
In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool
|
|||||
| CVE-2025-24459 | 1 Jetbrains | 1 Teamcity | 2025-01-30 | N/A | 4.6 MEDIUM |
|
In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page
|
|||||
| CVE-2024-36378 | 1 Jetbrains | 1 Teamcity | 2025-01-27 | N/A | 5.9 MEDIUM |
|
In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens
|
|||||
| CVE-2024-36377 | 1 Jetbrains | 1 Teamcity | 2025-01-27 | N/A | 6.5 MEDIUM |
|
In JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissions
|
|||||
| CVE-2024-36376 | 1 Jetbrains | 1 Teamcity | 2025-01-27 | N/A | 6.5 MEDIUM |
|
In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissions
|
|||||
| CVE-2024-36375 | 1 Jetbrains | 1 Teamcity | 2025-01-27 | N/A | 5.3 MEDIUM |
|
In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed
|
|||||
| CVE-2024-36374 | 1 Jetbrains | 1 Teamcity | 2025-01-27 | N/A | 4.6 MEDIUM |
|
In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible
|
|||||
| CVE-2024-36373 | 1 Jetbrains | 1 Teamcity | 2025-01-27 | N/A | 4.6 MEDIUM |
|
In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible
|
|||||
| CVE-2024-36372 | 1 Jetbrains | 1 Teamcity | 2025-01-27 | N/A | 4.6 MEDIUM |
|
In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible
|
|||||
| CVE-2024-56348 | 1 Jetbrains | 1 Teamcity | 2025-01-02 | N/A | 4.3 MEDIUM |
|
In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents
|
|||||
| CVE-2024-56349 | 1 Jetbrains | 1 Teamcity | 2025-01-02 | N/A | 5.3 MEDIUM |
|
In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs
|
|||||
| CVE-2024-56350 | 1 Jetbrains | 1 Teamcity | 2025-01-02 | N/A | 4.3 MEDIUM |
|
In JetBrains TeamCity before 2024.12 build credentials allowed unauthorized viewing of projects
|
|||||
| CVE-2024-56351 | 1 Jetbrains | 1 Teamcity | 2025-01-02 | N/A | 6.3 MEDIUM |
|
In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles
|
|||||
| CVE-2024-56352 | 1 Jetbrains | 1 Teamcity | 2025-01-02 | N/A | 4.6 MEDIUM |
|
In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page
|
|||||
| CVE-2024-56353 | 1 Jetbrains | 1 Teamcity | 2025-01-02 | N/A | 5.5 MEDIUM |
|
In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies
|
|||||
| CVE-2024-56354 | 1 Jetbrains | 1 Teamcity | 2025-01-02 | N/A | 5.5 MEDIUM |
|
In JetBrains TeamCity before 2024.12 password field value were accessible to users with view settings permission
|
|||||
| CVE-2024-56355 | 1 Jetbrains | 1 Teamcity | 2025-01-02 | N/A | 4.6 MEDIUM |
|
In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSS
|
|||||
| CVE-2024-56356 | 1 Jetbrains | 1 Teamcity | 2025-01-02 | N/A | 5.9 MEDIUM |
|
In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack
|
|||||
| CVE-2024-31140 | 1 Jetbrains | 1 Teamcity | 2024-12-16 | N/A | 4.1 MEDIUM |
|
In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing tools
|
|||||
| CVE-2024-31139 | 1 Jetbrains | 1 Teamcity | 2024-12-16 | N/A | 5.9 MEDIUM |
|
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector
|
|||||
| CVE-2024-31136 | 1 Jetbrains | 1 Teamcity | 2024-12-16 | N/A | 7.4 HIGH |
|
In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter
|
|||||
| CVE-2024-31134 | 1 Jetbrains | 1 Teamcity | 2024-12-16 | N/A | 6.5 MEDIUM |
|
In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled
|
|||||
| CVE-2024-36366 | 1 Jetbrains | 1 Teamcity | 2024-12-16 | N/A | 5.4 MEDIUM |
|
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations
|
|||||
| CVE-2024-36365 | 1 Jetbrains | 1 Teamcity | 2024-12-16 | N/A | 6.8 MEDIUM |
|
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent
|
|||||