Product

Microsoft azure devops server 2022 vulnerabilities

8 published CVES affecting Microsoft azure devops server 2022, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 8
Critical: 0
High: 5
Medium: 3
Low: 0
Unscored: 0
CISA KEV: 0

Latest Microsoft azure devops server 2022 CVEs

Newest publication first

CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability
Published 2026-02-10

MediumCVSS 6.5 EPSS 1.0%

Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.
CVE-2024-35267 Azure DevOps Server Spoofing Vulnerability
Published 2024-07-09

HighCVSS 7.6 EPSS 1.6%

Azure DevOps Server Spoofing Vulnerability
CVE-2024-35266 Azure DevOps Server Spoofing Vulnerability
Published 2024-07-09

HighCVSS 7.6 EPSS 1.6%

Azure DevOps Server Spoofing Vulnerability
CVE-2024-20667 Azure DevOps Server Remote Code Execution Vulnerability
Published 2024-02-13

HighCVSS 7.5 EPSS 1.4%

Azure DevOps Server Remote Code Execution Vulnerability
CVE-2023-21751 Azure DevOps Server Spoofing Vulnerability
Published 2023-12-13

MediumCVSS 6.5 EPSS 0.98%

Azure DevOps Server Spoofing Vulnerability
CVE-2023-21569 Azure DevOps Server Spoofing Vulnerability
Published 2023-06-13

MediumCVSS 5.5 EPSS 0.68%

Azure DevOps Server Spoofing Vulnerability
CVE-2023-21565 Azure DevOps Server Spoofing Vulnerability
Published 2023-06-13

HighCVSS 7.1 EPSS 0.93%

Azure DevOps Server Spoofing Vulnerability
CVE-2023-21564 Azure DevOps Server Cross-Site Scripting Vulnerability
Published 2023-02-14

HighCVSS 7.1 EPSS 0.89%

Azure DevOps Server Cross-Site Scripting Vulnerability

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.