CVE-2019-0867

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871.

• CWE-79

• http://www.securityfocus.com/bid/107752Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0867Patch, Vendor Advisory
• http://www.securityfocus.com/bid/107752Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0867Patch, Vendor Advisory

Published

Apr 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0861A remote code execution vulnerability exists in the way that…
• CVE-2019-0862A remote code execution vulnerability exists in the way that…
• CVE-2019-0863An elevation of privilege vulnerability exists in the way Wi…7.8
• CVE-2019-0864A denial of service vulnerability exists when .NET Framework…
• CVE-2019-0865A denial of service vulnerability exists when SymCrypt impro…
• CVE-2019-0866A Cross-site Scripting (XSS) vulnerability exists when Azure…
• CVE-2019-0868A Cross-site Scripting (XSS) vulnerability exists when Azure…
• CVE-2019-0869A spoofing vulnerability exists in Microsoft Azure DevOps Se…
• CVE-2019-0870A Cross-site Scripting (XSS) vulnerability exists when Azure…
• CVE-2019-0871A Cross-site Scripting (XSS) vulnerability exists when Azure…
• CVE-2019-0872A Cross-site Scripting (XSS) vulnerability exists when Azure…
• CVE-2019-0873Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…