Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jira software data center vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2019-20106
Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote malicious users to make comments on a ticket to which they do not have commenting permissions via a broken access cont...
Atlassian Jira
Atlassian Jira Server
Atlassian Jira Server 8.6.0
Atlassian Jira Software Data Center
Atlassian Jira Data Center
Atlassian Jira Data Center 8.6.0
4
CVSSv2
CVE-2020-14174
Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from...
Atlassian Jira
Atlassian Jira Server
Atlassian Jira Server 8.10.0
Atlassian Jira Software Data Center
Atlassian Jira Data Center
Atlassian Jira Data Center 8.10.0
7.5
CVSSv2
CVE-2019-20409
The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote malicious users to gain remote code execution if they were able to exploit a server side template injection vulnerability.
Atlassian Jira
Atlassian Jira Software Data Center
5
CVSSv2
CVE-2019-20898
Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0.
Atlassian Jira
Atlassian Jira Software Data Center
5
CVSSv2
CVE-2020-14165
The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote malicious users to obtain information about custom project avatars names via an Improper authorization vulnerability.
Atlassian Jira
Atlassian Jira Software Data Center
4.3
CVSSv2
CVE-2020-14169
The quick search component in Atlassian Jira Server and Data Center prior to 8.9.1 allows remote malicious users to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability
Atlassian Jira
Atlassian Jira Software Data Center
4
CVSSv2
CVE-2019-20402
Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Administrator user without requiring the user to re-enter their password via an improper authorization vulnerability.
Atlassian Jira
Atlassian Jira Software Data Center
3.5
CVSSv2
CVE-2019-20416
Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the project configuration feature. The affected versions are before version 8.3.0.
Atlassian Jira
Atlassian Jira Software Data Center
4
CVSSv2
CVE-2019-20418
Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to prevent users from accessing the instance via an Application Denial of Service vulnerability in the /rendering/wiki endpoint. The affected versions are before version 8.8.0.
Atlassian Jira
Atlassian Jira Software Data Center
4.3
CVSSv2
CVE-2020-14164
The WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows remote malicious users to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by pasting javascript code into the editor field.
Atlassian Jira
Atlassian Jira Software Data Center
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-26978
CVE-2024-26982
wireless
CVE-2023-6949
CVE-2024-26980
CVE-2024-32766
CVE-2024-26939
cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »