İçeriğe atla
Noroxi

JetBrains kayıtları

jetbrains üreticisine ait 658 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
4 · %0,6
Silahlaştırılmış
4 · %0,6
Pre-auth RCE
26
Düzeltme kaydı olan
%59,1
Yayından KEV’e ortanca
12 gün

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

658 kayıt
  • CVE-2023-42793
    99Hemen

    In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    jetbrains · teamcity19 Eyl 2023

  • CVE-2024-27198
    99Hemen

    In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    jetbrains · teamcity4 Mar 2024

  • CVE-2026-63077
    96Hemen

    In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %90

    jetbrains · teamcity27 Tem 2026

  • CVE-2024-27199
    89Hemen

    In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

    YüksekCVSS 7,3KEVSilahlaştırılmışEPSS %100

    jetbrains · teamcity4 Mar 2024

  • CVE-2024-23917
    55Planlayın

    In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible

    KritikCVSS 9,8Kavram kanıtıEPSS %54

    jetbrains · teamcity6 Şub 2024

  • CVE-2024-31138
    43Planlayın

    In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings

    OrtaCVSS 5,4İstismar yokEPSS %75

    jetbrains · teamcity28 Mar 2024

  • CVE-2025-46618
    43Planlayın

    In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab

    OrtaCVSS 6,1İstismar yokEPSS %63

    jetbrains · teamcity25 Nis 2025

  • CVE-2019-15039
    43Planlayın

    An issue was discovered in JetBrains TeamCity 2018.2.4.

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    jetbrains · teamcity1 Eki 2019

  • CVE-2022-48343
    42Planlayın

    In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.

    OrtaCVSS 6,1İstismar yokEPSS %59

    jetbrains · teamcity23 Şub 2023

  • CVE-2022-48428
    41Planlayın

    In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible

    OrtaCVSS 5,4İstismar yokEPSS %68

    jetbrains · teamcity27 Mar 2023

  • CVE-2023-41249
    41Planlayın

    In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step

    OrtaCVSS 6,1İstismar yokEPSS %56

    jetbrains · teamcity25 Ağu 2023

  • CVE-2020-25207
    40Planlayın

    JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler.

    KritikCVSS 9,8İstismar yokEPSS %5

    jetbrains · toolbox16 Kas 2020

  • CVE-2019-9186
    40Planlayın

    In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute co

    KritikCVSS 9,8İstismar yokEPSS %5

    jetbrains · intellij idea3 Tem 2019

  • CVE-2019-10104
    40Planlayın

    In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with

    KritikCVSS 9,8İstismar yokEPSS %4

    jetbrains · intellij idea3 Tem 2019

  • CVE-2022-24442
    40Planlayın

    JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    jetbrains · youtrack25 Şub 2022

  • CVE-2019-18364
    40Planlayın

    In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %3

    jetbrains · teamcity31 Eki 2019

  • CVE-2021-25770
    40Planlayın

    In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution.

    KritikCVSS 9,8İstismar yokEPSS %3

    jetbrains · youtrack3 Şub 2021

  • CVE-2021-31915
    40Planlayın

    In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.

    KritikCVSS 9,8İstismar yokEPSS %3

    jetbrains · teamcity11 May 2021

  • CVE-2021-31909
    40Planlayın

    In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.

    KritikCVSS 9,8İstismar yokEPSS %3

    jetbrains · teamcity11 May 2021

  • CVE-2020-11690
    40Planlayın

    In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases.

    KritikCVSS 9,8İstismar yokEPSS %2

    jetbrains · intellij idea22 Nis 2020

  • CVE-2021-31914
    40Planlayın

    In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible.

    KritikCVSS 9,8İstismar yokEPSS %2

    jetbrains · teamcity11 May 2021

  • CVE-2019-10100
    40Planlayın

    In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection.

    KritikCVSS 9,8İstismar yokEPSS %2

    jetbrains · youtrack integration3 Tem 2019

  • CVE-2019-12736
    40Planlayın

    JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injec

    KritikCVSS 9,8İstismar yokEPSS %2

    jetbrains · ktor2 Eki 2019

  • CVE-2019-12850
    40Planlayın

    A query injection was possible in JetBrains YouTrack.

    KritikCVSS 9,8İstismar yokEPSS %2

    jetbrains · youtrack3 Tem 2019

  • CVE-2022-25263
    40Planlayın

    JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.

    KritikCVSS 9,8İstismar yokEPSS %2

    jetbrains · teamcity25 Şub 2022