jira vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impact the application's availability via an Denial of Service (DoS)...

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

7.2

CVSSv3

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protection of app-linked resources via a Broken Authentication vulnerability in the `makeRequest` gadget resource. The affected versions are before version 8.13.3, and...

Atlassian Data Center Atlassian Jira Atlassian Jira Server

7.2

CVSSv3

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands via a Server_Side Template Injection vulnerability in the Email...

Atlassian Jira Service Desk Atlassian Jira Service Management6 Github repositories available

4.3

CVSSv3

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from...

Atlassian Jira Atlassian Jira Server Atlassian Jira Server 8.10.0 Atlassian Jira Software Data Center Atlassian Jira Data Center Atlassian Jira Data Center 8.10.0

4.3

CVSSv3

Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control...

Atlassian Jira Atlassian Jira Server Atlassian Jira Server 8.6.0 Atlassian Jira Software Data Center Atlassian Jira Data Center Atlassian Jira Data Center 8.6.0

4.3

CVSSv3

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2....

Atlassian Jira Atlassian Jira Server Atlassian Jira Data Center

5.3

CVSSv3

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue...

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

6.1

CVSSv3

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the ViewWorkflowSchemes.jspa and ListWorkflows.jspa endpoints. The affected versions are before version...

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

5.9

CVSSv3

The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM)...

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

5.4

CVSSv3

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in Issue Navigator Basic Search. The affected versions are before version 7.13.9, and from version 8.0.0 before...

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

Get Started

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook