Jetbrains Teamcity vulnerabilities, page 2
284 vulnerabilities
Known vulnerabilities in Jetbrains Teamcity, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25773jetbrainsteamcity
EPSS score0.65%
JetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages.CVE-2021-25778jetbrainsteamcityEPSS score0.77%
In JetBrains TeamCity before 2020.2.1, permissions during user deletion were checked improperly.CVE-2021-25772jetbrainsteamcityEPSS score1.03%
In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration.CVE-2021-37548jetbrainsteamcityEPSS score0.63%
In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.CVE-2021-37544jetbrainsteamcityEPSS score1.20%
In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.CVE-2021-37547jetbrainsteamcityEPSS score0.71%
In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.CVE-2021-37545jetbrainsteamcityEPSS score0.87%
In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made.CVE-2021-37542jetbrainsteamcityEPSS score0.62%
In JetBrains TeamCity before 2020.2.3, XSS was possible.CVE-2021-37546jetbrainsteamcityEPSS score0.55%
In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used.CVE-2021-43201jetbrainsteamcityEPSS score0.71%
In JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an already deleted project.CVE-2021-43197jetbrainsteamcityEPSS score0.59%
In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.CVE-2021-43199jetbrainsteamcityEPSS score0.68%
In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.CVE-2021-43198jetbrainsteamcityEPSS score0.46%
In JetBrains TeamCity before 2021.1.2, stored XSS is possible.CVE-2021-43194jetbrainsteamcityEPSS score0.86%
In JetBrains TeamCity before 2021.1.2, user enumeration was possible.CVE-2021-43193jetbrainsteamcityEPSS score2.02%
In JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is possible.CVE-2021-43202jetbrainsteamcityEPSS score1.10%
In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.CVE-2021-43200jetbrainsteamcityEPSS score1.09%
In JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were insufficient.CVE-2021-43195jetbrainsteamcityEPSS score0.71%
In JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.CVE-2021-43196jetbrainsteamcityEPSS score1.01%
In JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection dialog is possible.CVE-2021-3315jetbrainsteamcityEPSS score0.46%
In JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible.