CVE-2019-0875

7.5 highEPSS 3.0%

High (7.5) in microsoft azure devops server. EPSS 3.0% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions, aka 'Azure DevOps Server Elevation of Privilege Vulnerability'.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
Published: 2019-04-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:azure_devops_server

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0875
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0875

Check your stack JSON