Total
283 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-49372 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 7.5 HIGH |
| In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible | |||||
| CVE-2026-49373 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 7.1 HIGH |
| In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings | |||||
| CVE-2026-49374 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 7.6 HIGH |
| In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters | |||||
| CVE-2026-49376 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 6.5 MEDIUM |
| In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin | |||||
| CVE-2026-49375 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 6.1 MEDIUM |
| In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page | |||||
| CVE-2026-49377 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 4.3 MEDIUM |
| In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters | |||||
| CVE-2026-49381 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 3.4 LOW |
| In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible | |||||
| CVE-2026-49378 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 4.3 MEDIUM |
| In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion | |||||
| CVE-2026-49371 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 7.1 HIGH |
| In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible | |||||
| CVE-2026-49379 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 6.5 MEDIUM |
| In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names | |||||
| CVE-2026-28196 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 2.3 LOW |
| In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk | |||||
| CVE-2026-28195 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 4.3 MEDIUM |
| In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations | |||||
| CVE-2026-28194 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 4.3 MEDIUM |
| In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow | |||||
| CVE-2025-68268 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 5.4 MEDIUM |
| In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page | |||||
| CVE-2025-68267 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 6.5 MEDIUM |
| In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token | |||||
| CVE-2025-68166 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 5.4 MEDIUM |
| In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab | |||||
| CVE-2025-68165 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 5.4 MEDIUM |
| In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup | |||||
| CVE-2025-68164 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 2.7 LOW |
| In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test | |||||
| CVE-2025-68163 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 3.5 LOW |
| In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page | |||||
| CVE-2025-68162 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | N/A | 2.7 LOW |
| In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration | |||||