CVE-2023-21751

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Azure DevOps Server Spoofing Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
MicrosoftAzure DevOps Server 2022>= 20231128.1, < 20231128.1
MicrosoftAzure DevOps Server 2020.1.2>= 2020.1.0, < 20231127.4

References

Timeline

Published
Dec 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-217527.1Windows Backup Service Elevation of Privilege VulnerabilityCVE-2023-217535.5Event Tracing for Windows Information Disclosure VulnerabilityCVE-2023-217547.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217557.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217567.8Windows Win32k Elevation of Privilege VulnerabilityCVE-2023-217577.5Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service VulnerabilityCVE-2023-217587.5Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2023-217593.3Windows Smart Card Resource Management Server Security Feature Bypass VulnerabilityCVE-2023-21767.8A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup resultCVE-2023-217607.1Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2023-217617.5Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2023-217628.0Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-21751: Medium severity, CVSS 6.5 | Vulnix