Jetbrains: >> Teamcity >> 10.0.5 Security Vulnerabilities
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
CVSS Score
4.3
EPSS Score
0.007
Published
2026-05-29
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
CVSS Score
4.3
EPSS Score
0.002
Published
2026-05-29
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
CVSS Score
6.5
EPSS Score
0.002
Published
2026-05-29
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
CVSS Score
3.1
EPSS Score
0.002
Published
2026-05-29
In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible
CVSS Score
7.1
EPSS Score
0.003
Published
2026-05-29
In JetBrains TeamCity before 2026.1
2025.11.5 authenticated users could expose server API to unauthorised access
CVSS Score
8.2
EPSS Score
0.003
Published
2026-05-11
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations
CVSS Score
4.3
EPSS Score
0.002
Published
2026-02-25
In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk
CVSS Score
2.3
EPSS Score
0.001
Published
2026-02-25
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow
CVSS Score
4.3
EPSS Score
0.002
Published
2026-02-25
In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test
CVSS Score
2.7
EPSS Score
0.002
Published
2025-12-16