Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jira vulnerabilities and exploits

(subscribe to this query)

7.5
CVSSv3
CVE-2019-20413
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
4.3
CVSSv3
CVE-2020-14174
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Server 8.10.0Atlassian Jira Software Data CenterAtlassian Jira Data CenterAtlassian Jira Data Center 8.10.0
7.5
CVSSv3
CVE-2020-14178
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affected versions are before version 7.13.7, from version 8.0.0 before 8.5.8, and from...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
5.4
CVSSv3
CVE-2020-4021
Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the XML export view....
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
6.5
CVSSv3
CVE-2021-41308
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the `ReplicationSettings!default.jspa` endpoint. The affected versions are...
Atlassian JiraAtlassian Jira Software Data CenterAtlassian Jira ServerAtlassian Jira Data Center
4.8
CVSSv3
CVE-2020-4025
The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
4.3
CVSSv3
CVE-2019-20415
Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0....
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
6.5
CVSSv3
CVE-2019-20410
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
7.5
CVSSv3
CVE-2020-14167
The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impact the application's availability via an Denial of Service (DoS)...
Atlassian JiraAtlassian Jira ServerAtlassian Jira Software Data CenterAtlassian Jira Data Center
6.1
CVSSv3
CVE-2019-20901
The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect in the os_destination parameter....
Atlassian JiraAtlassian Jira Server 8.6.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
elevation of privilegeCVE-2022-42331CVE-2023-24709CVE-2023-27569open redirectinjectionCVE-2023-27087
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook