CVE-2019-1072

CVSS 3.0: 9.8 critical
EPSS: 12%p96
Published: Jul 15, 2019 · Jul 15, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-1072 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.

Vendors: microsoft

Products: team foundation server, azure devops server

Weakness: CWE-20

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.4%)

In the news

1 story

July 2019 Patch Tuesday: Microsoft plugs two actively exploited zero-days

Help Net SecurityJul 10, 00:00 UTC · Jul 10, 2019Exploit / PoCExploitedCVE-2019-0880 CVE-2019-1132 CVE-2019-1068+41 · 1 read