CVE-2019-1072

EPSS 12.4%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 12.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

15 Jul 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.

Affected products

Microsoft · Azure DevOps Server Microsoft · Team Foundation Server Microsoft · Team Foundation Server 2010 Microsoft · Team Foundation Server 2012 Microsoft · Team Foundation Server 2013 Update 5 Microsoft · Team Foundation Server 2015 Microsoft · Team Foundation Server 2018

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1072