Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possibleCheck if you run itEPSS 0.17%Oct 15, 2026
- High8.0In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possibleCheck if you run itEPSS 0.15%Oct 15, 2026
- High8.1In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possibleCheck if you run itEPSS 0.38%Oct 15, 2026
- Critical9.8JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 89.57%Jul 27, 2026
- Medium4.8In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possibleCheck if you run itEPSS 0.29%May 29, 2026
- Medium6.1In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possibleCheck if you run itEPSS 0.23%May 29, 2026
- Medium6.5In JetBrains TeamCity before 2026.1 credentials could be exposed in thread namesCheck if you run itEPSS 0.34%May 29, 2026
- Medium4.3In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletionCheck if you run itEPSS 0.29%May 29, 2026
- Medium4.3In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parametersCheck if you run itEPSS 0.92%May 29, 2026
- Medium6.5In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML pluginCheck if you run itEPSS 0.29%May 29, 2026
- Medium6.1In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download pageCheck if you run itEPSS 0.30%May 29, 2026
- High7.6In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parametersCheck if you run itEPSS 0.31%May 29, 2026
- High8.8In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settingsCheck if you run itEPSS 0.60%May 29, 2026
- High7.5In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possibleCheck if you run itEPSS 0.39%May 29, 2026
- High8.2In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possibleCheck if you run itEPSS 0.35%May 29, 2026
- High7.5In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised accessCheck if you run itEPSS 0.34%May 11, 2026
- Low2.3In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on diskCheck if you run itEPSS 0.18%Feb 25, 2026
- Medium4.3In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurationsCheck if you run itEPSS 0.27%Feb 25, 2026
- Medium6.1In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flowCheck if you run itEPSS 0.30%Feb 25, 2026
- UnknownJetBrains TeamCity Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 54.01%Oct 17, 2025
- Low3.5In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tabCheck this weekEPSS 63.03%Apr 25, 2025
- Medium4.9In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possibleCheck if you run itEPSS 0.55%Apr 25, 2025
- Medium4.3In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logsCheck if you run itEPSS 1.01%Apr 25, 2025
- High7.3JetBrains TeamCity Relative Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Mar 4, 2024
- Critical9.8JetBrains TeamCity Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.94%Mar 4, 2024
26 records · page 1 of 2
PreviousNext