Jetbrains Teamcity vulnerabilities, page 4
284 vulnerabilities
Known vulnerabilities in Jetbrains Teamcity, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-68267jetbrainsteamcity
EPSS score0.21%
In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation tokenCVE-2025-68165jetbrainsteamcityEPSS score4.21%
In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setupCVE-2025-68163jetbrainsteamcityEPSS score0.19%
In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall pageCVE-2025-68166jetbrainsteamcityEPSS score0.20%
In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tabCVE-2025-68268jetbrainsteamcityEPSS score0.21%
In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings pageCVE-2025-68162jetbrainsteamcityEPSS score0.21%
In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configurationCVE-2025-68164jetbrainsteamcityEPSS score0.24%
In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection testCVE-2025-26493jetbrainsteamcityEPSS score0.38%
In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tabCVE-2025-26492jetbrainsteamcityEPSS score0.42%
In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resourcesCVE-2025-47853jetbrainsteamcityEPSS score0.76%
In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possibleCVE-2025-47851jetbrainsteamcityEPSS score2.83%
In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possibleCVE-2025-47852jetbrainsteamcityEPSS score0.76%
In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possibleCVE-2025-47854jetbrainsteamcityEPSS score0.27%
In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root pageCVE-2025-31140jetbrainsteamcityEPSS score28.04%
In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles pageCVE-2025-31139jetbrainsteamcityEPSS score1.05%
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build logCVE-2025-31141jetbrainsteamcityEPSS score0.37%
In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles pageCVE-2025-57733jetbrainsteamcityEPSS score0.28%
In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email contentCVE-2025-57734jetbrainsteamcityEPSS score0.80%
In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script filesCVE-2025-57732jetbrainsteamcityEPSS score0.12%
In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownershipCVE-2025-67742jetbrainsteamcityEPSS score0.80%
In JetBrains TeamCity before 2025.11 path traversal was possible via file upload