CVE-2019-0875: Microsoft Azure Devops Server

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions, aka 'Azure DevOps Server Elevation of Privilege Vulnerability'.

Affected products

• Microsoft Azure Devops Server: version 2019 only

Published 2019-04-09. Last modified 2026-06-17.