CVE-2019-1306

EPSS 15.9%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 15.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Sep 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.

Affected products

Microsoft · Azure DevOps Server Microsoft · Azure DevOps Server 2019 Update 1 Microsoft · Team Foundation Server 2018

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1306