HIGH 8.8 Microsoft

CVE-2023-33136

Azure DevOps Server Remote Code Execution Vulnerability

Microsoft Security Update 2023-Sep: Azure DevOps Server Remote Code Execution Vulnerability

Affected Products

Azure DevOps Server 2020.0.2
Azure DevOps Server 2019.1.2
Azure DevOps Server 2020.1.2
Azure DevOps Server 2022.0.1
Azure DevOps Server 2019.0.1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33136
https://nvd.nist.gov/vuln/detail/CVE-2023-33136

Published: 2023-09-12 · Source: Microsoft · Feed updated: 2026-09-03

This high severity vulnerability with a CVSS score of 8.8 was published on 2023-09-12 via Microsoft. Affected: Azure DevOps Server 2020.0.2, Azure DevOps Server 2019.1.2, Azure DevOps Server 2020.1.2 and 2 more.

vulnfeed aggregates 9119 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.