Skip to contentJetbrains Teamcity vulnerabilities
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak...CVE-2025-545355.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset pageCVE-2025-545344.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings...CVE-2025-545334.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings...CVE-2025-545324.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on WindowsCVE-2025-545317.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory...CVE-2025-545307.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integrationCVE-2025-545293.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flowCVE-2025-545285.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possibleCVE-2025-528794.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper...CVE-2025-528784.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possibleCVE-2025-52877EPSS 37.0%4.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possibleCVE-2025-52876EPSS 38.6%5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possibleCVE-2025-528755.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root pageCVE-2025-478544.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possibleCVE-2025-478534.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possibleCVE-2025-478524.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possibleCVE-2025-478514.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tabCVE-2025-46618EPSS 63.0%3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was...CVE-2025-464334.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logsCVE-2025-464324.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles...CVE-2025-311412.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles pageCVE-2025-31140EPSS 28.0%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build logCVE-2025-311394.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose...CVE-2025-264927.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection...CVE-2025-264934.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper...CVE-2025-244616.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in...CVE-2025-244604.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection pageCVE-2025-244594.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE...CVE-2024-563565.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController...CVE-2024-563554.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 password field value were accessible to users with view...CVE-2024-563545.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookiesCVE-2024-563535.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details...CVE-2024-563524.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user rolesCVE-2024-563516.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 build credentials allowed unauthorized viewing of projectsCVE-2024-563504.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify...CVE-2024-563495.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 improper access control allowed viewing details of...CVE-2024-56348Public exploit4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settingsCVE-2024-479513.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settingsCVE-2024-479503.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary...CVE-2024-47949EPSS 32.1%4.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was...CVE-2024-479484.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST APICVE-2024-471614.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core pluginCVE-2024-438104.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset pageCVE-2024-438093.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault pluginCVE-2024-438083.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds pageCVE-2024-438074.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory...CVE-2024-431147.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space...CVE-2024-418293.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant timeCVE-2024-418282.6 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or...CVE-2024-418277.4 High
- Show moreLoading…