Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

atlassian jira software data center vulnerabilities and exploits

(subscribe to this query)

5.4
CVSSv3
CVE-2020-14173
The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2,...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
4.3
CVSSv3
CVE-2020-36231
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure Direct Object References (IDOR) vulnerability. The affected versions are before version 8.5.10, and from version 8.6.0...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Server 8.13.3Atlassian Jira Software Data CenterAtlassian Jira Data CenterAtlassian Jira Data Center 8.13.3
5.9
CVSSv3
CVE-2020-14168
The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM)...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
6.1
CVSSv3
CVE-2020-36236
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the ViewWorkflowSchemes.jspa and ListWorkflows.jspa endpoints. The affected versions are before version...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
5.3
CVSSv3
CVE-2019-20412
The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
5.4
CVSSv3
CVE-2020-4024
The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
5.4
CVSSv3
CVE-2019-20414
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in Issue Navigator Basic Search. The affected versions are before version 7.13.9, and from version 8.0.0 before...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
6.5
CVSSv3
CVE-2019-20897
The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7.0 before...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
6.1
CVSSv3
CVE-2020-4022
The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
4.3
CVSSv3
CVE-2020-14174
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Server 8.10.0Atlassian Jira Software Data CenterAtlassian Jira Data CenterAtlassian Jira Data Center 8.10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
arbitrary CVE-2022-2257CVE-2013-4585CVE-2013-4493CVE-2022-26134brute forceSQLCVE-2022-30333CVE-2022-33327
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook