CVE-2019-0996— Azure DevOps Server Spoofing Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-0996
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Azure DevOps Server Spoofing Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery. An attacker who successfully exploited this vulnerability could bypass OAuth protections and register an application on behalf of the targeted user. To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request. The attacker would then need to convince a targeted user to click a link to the malicious page. The update addresses the vulnerability by modifying how Azure DevOps Server protects application registration requests.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Azure DevOps Server 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Azure DevOps Server是美国微软（Microsoft）公司的一套软件开发协作工具。该产品包括共享代码、工作跟踪和软件发布等功能。 Microsoft Azure DevOps Server 2019中存在安全漏洞。攻击者可利用该漏洞绕过安全限制，执行未授权的操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Azure DevOps Server 2019 | 0 ~ publication | - |
II. Public POCs for CVE-2019-0996
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-0996
请登录查看更多情报信息。
Same Patch Batch · Microsoft · 2019-06-12 · 88 CVEs total
| CVE-2019-0722 | 8.8 HIGH | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2019-0888 | 8.8 HIGH | ActiveX Data Objects (ADO) Remote Code Execution Vulnerability |
| CVE-2019-1019 | 8.5 HIGH | Microsoft Windows Security Feature Bypass Vulnerability |
| CVE-2019-1065 | 7.8 HIGH | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2019-1022 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-0908 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0973 | 7.8 HIGH | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2019-0974 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0983 | 7.8 HIGH | Windows Storage Service Elevation of Privilege Vulnerability |
| CVE-2019-0985 | 7.8 HIGH | Microsoft Speech API Remote Code Execution Vulnerability |
| CVE-2019-0906 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0905 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0904 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-1026 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1027 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1028 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1021 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1007 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-0998 | 7.8 HIGH | Windows Storage Service Elevation of Privilege Vulnerability |
| CVE-2019-1045 | 7.8 HIGH | Windows Network File System Elevation of Privilege Vulnerability |
Showing top 20 of 88 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: Microsoft
- CVE-2026-42826
Azure DevOps Information Disclosure Vulnerability - CVE-2026-35428
Azure Cloud Shell Spoofing Vulnerability - CVE-2026-35435
Azure AI Foundry Elevation of Privilege Vulnerability - CVE-2026-34327
Microsoft Partner Center Spoofing Vulnerability - CVE-2026-33844
Azure Managed Instance for Apache Cassandra Remote Code Exec
V. Comments for CVE-2019-0996
No comments yet