What is the CVSS score of CVE-2020-1325?

CVE-2020-1325 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 1.5%.

Is there a patch available for CVE-2020-1325?

Yes, a patch is available for CVE-2020-1325. Update the affected software to the latest version immediately.

Azure Devops Server CVE-2020-1325

MEDIUM

2020-11-11 secure@microsoft.com

Microsoft Information Disclosure Azure Devops Server

5.4

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Nov 11, 2020 - 07:15 cve.org

MEDIUM 5.4

DescriptionCVE.org

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

AnalysisAI

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability Affected products include: Microsoft Azure Devops Server.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Azure Devops Server

View all

CVE-2021-28459 MEDIUM This Month POC

6.1 Apr 13

Azure DevOps Server Spoofing Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable

CVE-2019-1306 CRITICAL Act Now

9.8 Sep 11

A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to val

CVE-2019-1072 CRITICAL Act Now

9.8 Jul 15

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle

CVE-2023-33136 HIGH This Week

8.8 Sep 12

Azure DevOps Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely

CVE-2023-38155 HIGH This Week

8.1 Sep 12

Azure DevOps Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely

CVE-2024-35267 HIGH This Week

7.6 Jul 09

Azure DevOps Server Spoofing Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable,

CVE-2024-35266 HIGH This Week

7.6 Jul 09

Azure DevOps Server Spoofing Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable,

CVE-2024-20667 HIGH This Week

7.5 Feb 13

Azure DevOps Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely

CVE-2023-21553 HIGH This Week

7.5 Feb 14

Azure DevOps Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely

CVE-2020-0815 HIGH This Week

7.5 Mar 12

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle p

CVE-2020-0758 HIGH This Week

7.5 Mar 12

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle p

CVE-2019-0875 HIGH This Week

7.5 Apr 09

An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissio

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2020-1325 vulnerability details – vuln.today

Back