Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
atlassian jira service management vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2022-26135
A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center f...
Atlassian Jira Service Management
Atlassian Jira Data Center
Atlassian Jira Server
Atlassian Jira Service Desk
3 Github repositories
5.7
CVSSv3
CVE-2021-43959
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote malicious users to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability in the CSV importing feature of JSM Insight. When ru...
Atlassian Jira Service Management
Atlassian Jira Service Desk
5.3
CVSSv3
CVE-2021-41309
Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export audit logs of another user's Jira Service Management project via a Broken Authentication vulnerability in the /plugins/servlet/audit/res...
Atlassian Jira Software Data Center
4.8
CVSSv3
CVE-2021-43943
Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privileges to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the "Object Schema" field of /secure/admin/InsightDefault...
Atlassian Jira Service Management
4.3
CVSSv3
CVE-2022-36800
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before ve...
Atlassian Jira Service Management
4.3
CVSSv3
CVE-2021-43948
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote malicious users to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before vers...
Atlassian Jira Service Management
4.3
CVSSv3
CVE-2021-43950
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote malicious users to view import source configuration information via a Broken Access Control vulnerability in the Insight Import Source feature. The affected versions are befor...
Atlassian Jira Service Management
4.3
CVSSv3
CVE-2021-43949
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote malicious users to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0.
Atlassian Jira Service Management
4.3
CVSSv3
CVE-2021-43951
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote malicious users to view object import configuration details via an Information Disclosure vulnerability in the Create Object type mapping feature. The affected versions are be...
Atlassian Jira Service Management
NA
CVE-2024-21682
This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Assets Discovery, which can be downloaded via Atlassian Marketplace, is a network scanning tool that can be used with or without an agent with Jira Service Management Cloud, ...
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-52710
arbitrary
CVE-2024-5272
CVE-2024-2961
brute force
remote
CVE-2024-32944
CVE-2024-36241
CVE-2024-5274
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »