Jul 2019:
CVE-2019-1072 Published on July 15, 2019
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
Products Associated with CVE-2019-1072
stack.watch emails you whenever new vulnerabilities are published in Microsoft Team Foundation Server or Microsoft Azure Devops Server. Just hit a watch button to start following.
Affected Versions
Microsoft Team Foundation Server 2012:- Version Update 4 is affected.
- Version unspecified is affected.
- Version Update 1.2 is affected.
- Version Update 3.2 is affected.
- Version 2017 Update 3.1 is affected.
- Version Update 4.2 is affected.
- Version 2019.0.1 is affected.
- Version SP1 (x86) is affected.
- Version SP1 (x64) is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.