CVE-2018-8602

CVSS 3.0: 5.4 medium
EPSS: 2%p76
Published: Nov 14, 2018 · Nov 14, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-8602 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.

Vendors: microsoft

Products: team foundation server

Weakness: CWE-79

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news

1 story

63 New Flaws (Including 0

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2018Exploit / PoCExploitedCVE-2018-8589 CVE-2018-8584 CVE-2018-8566+472