HIGH 7.0 Microsoft

CVE-2023-38155

Azure DevOps Server Remote Code Execution Vulnerability

Microsoft Security Update 2023-Sep: Azure DevOps Server Remote Code Execution Vulnerability

Affected Products

Azure DevOps Server 2019.0.1
Azure DevOps Server 2022.0.1
Azure DevOps Server 2020.1.2
Azure DevOps Server 2019.1.2
Azure DevOps Server 2020.0.2

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38155
https://nvd.nist.gov/vuln/detail/CVE-2023-38155

Published: 2023-09-12 · Source: Microsoft · Feed updated: 2026-09-03

This high severity vulnerability with a CVSS score of 7.0 was published on 2023-09-12 via Microsoft. Affected: Azure DevOps Server 2019.0.1, Azure DevOps Server 2022.0.1, Azure DevOps Server 2020.1.2 and 2 more.

vulnfeed aggregates 9119 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.