Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.7In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possibleEPSS 0.2%Oct 15, 2026
- High8.0In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possibleEPSS 0.2%Oct 15, 2026
- High8.1In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possibleEPSS 0.4%Oct 15, 2026
- Critical9.8JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityKEVEPSS 89.6%Jul 27, 2026
- Medium4.8In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possibleEPSS 0.3%May 29, 2026
- Medium6.1In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possibleEPSS 0.2%May 29, 2026
- Medium6.5In JetBrains TeamCity before 2026.1 credentials could be exposed in thread namesEPSS 0.3%May 29, 2026
- Medium4.3In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletionEPSS 0.3%May 29, 2026
- Medium4.3In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parametersEPSS 0.9%May 29, 2026
- Medium6.5In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML pluginEPSS 0.3%May 29, 2026
- Medium6.1In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download pageEPSS 0.3%May 29, 2026
- High7.6In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parametersEPSS 0.3%May 29, 2026
- High8.8In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settingsEPSS 0.6%May 29, 2026
- High7.5In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possibleEPSS 0.4%May 29, 2026
- High8.2In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possibleEPSS 0.4%May 29, 2026
- High7.5In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised accessEPSS 0.3%May 11, 2026
- Low2.3In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on diskEPSS 0.2%Feb 25, 2026
- Medium4.3In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurationsEPSS 0.3%Feb 25, 2026
- Medium6.1In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flowEPSS 0.3%Feb 25, 2026
- UnknownJetBrains TeamCity Authentication Bypass Using an Alternate Path or ChannelKEVEPSS 54.0%Oct 17, 2025
- Low3.5In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tabEPSS 63.0%Apr 25, 2025
- Medium4.9In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possibleEPSS 0.5%Apr 25, 2025
- Medium4.3In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logsEPSS 1.0%Apr 25, 2025
- High7.3JetBrains TeamCity Relative Path Traversal VulnerabilityKEVEPSS 100.0%Mar 4, 2024
- Critical9.8JetBrains TeamCity Authentication Bypass VulnerabilityKEVEPSS 99.9%Mar 4, 2024
26 records · page 1 of 2
PreviousNext