Veille CVE

Recherche « jetbrains teamcity »

28 CVE

Critique 7 Élevée 10 Moyenne 11 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « jetbrains teamcity » ✕
  1. CVE-2026-111096 5.4 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible

  2. CVE-2026-111095 5.4 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible

  3. CVE-2026-111094 9.8 Critique

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible

  4. CVE-2026-106219 7.5 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server

  5. CVE-2026-106218 10.0 Critique

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

  6. CVE-2026-100255 9.8 Critique

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset

  7. CVE-2026-100254 8.8 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings

  8. CVE-2026-100253 8.8 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL

  9. CVE-2026-63077 9.8 Critique Exploitée Rançongiciel

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

  10. CVE-2026-65907 9.1 Critique

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

  11. CVE-2026-65906 10.0 Critique

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

  12. CVE-2026-59796 8.1 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

  13. CVE-2026-59795 6.1 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

  14. CVE-2026-59794 5.4 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

  15. CVE-2026-59793 8.8 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration

  16. CVE-2026-49381 4.8 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible

  17. CVE-2026-49380 6.1 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible

  18. CVE-2026-49379 6.5 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names

  19. CVE-2026-49378 4.3 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

  20. CVE-2026-49377 4.3 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

  21. CVE-2026-49376 6.5 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin

  22. CVE-2026-49375 6.1 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page

  23. CVE-2026-49374 7.6 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters

  24. CVE-2026-49373 8.8 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings

  25. CVE-2026-49372 7.5 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible

  26. CVE-2026-49371 8.2 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible

  27. CVE-2026-44413 7.5 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access

  28. CVE-2024-27198 9.8 Critique Exploitée Rançongiciel

    jetbrains teamcity

    In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible