Microsoft Visual Studio Team Foundation Server vulnerabilities

2 CVEs affecting Microsoft Visual Studio Team Foundation Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5042, published 2013-12-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-1892, published 2012-09-11. Medium severity, CVSS 4.3. EPSS: 16.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka…
• CVE-2013-5042, published 2013-12-11. Medium severity, CVSS 4.3. EPSS: 11.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject…