jira vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7.0 before...

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

6.1

CVSSv3

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a...

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

5.4

CVSSv3

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a...

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

6.5

CVSSv3

A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center...

Atlassian Jira Service Management Atlassian Jira Data Center Atlassian Jira Server Atlassian Jira Service Desk3 Github repositories available

5.3

CVSSv3

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL endpoint via a Broken Access Control vulnerability (BAC) vulnerability. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.1....

Atlassian Jira Atlassian Jira Software Data Center Atlassian Jira Server Atlassian Jira Data Center

4.3

CVSSv3

The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability....

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

5.3

CVSSv3

The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unresponsive via repeated requests to a certain endpoint in the Gadget API. The affected versions are before version 8.5.4, and from version 8.6.0 before 8.6.1....

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

6.1

CVSSv3

NOTE: This candidate is a duplicate of CVE-2019-15011. All CVE users should reference CVE-2019-15011 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage....

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

7.5

CVSSv3

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0...

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

5.4

CVSSv3

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in Jira issue filter export files. The affected versions are before 8.5.9, from version 8.6.0 before 8.12.3, and from version...

Atlassian Jira Atlassian Jira Server Atlassian Jira Server 8.13.0

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook