Skip to content

Atlassian Jira vulnerabilities

atlassian jira, jira server +1 moreThe IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7...CVE-2018-133876.1 MediumJuly 16, 2018
atlassian jira, jira server +1 moreThe ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before...CVE-2018-52317.5 HighMay 16, 2018
atlassian jira, jira server +1 moreThe issue collector in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7...CVE-2018-5230EPSS 37.0%6.1 MediumMay 14, 2018
atlassian atlassian-renderer, jira server +1 moreThe wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows...CVE-2017-181025.4 MediumApril 17, 2018
atlassian jira, jira server +1 moreVarious administrative external system import resources in Atlassian JIRA Server (including JIRA...CVE-2017-181016.5 MediumApril 10, 2018
atlassian jiraThe agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to...CVE-2017-181006.1 MediumApril 10, 2018
atlassian jiraThe searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to...CVE-2017-180986.1 MediumApril 6, 2018
atlassian jiraThe Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers...CVE-2017-180975.4 MediumApril 6, 2018
atlassian jiraThe IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows...CVE-2017-180396.1 MediumFebruary 2, 2018
atlassian jiraThe PieChart gadget in Atlassian Jira before version 7.5.3 allows remote attackers to inject...CVE-2017-168636.1 MediumJanuary 18, 2018
atlassian jiraThe Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to...CVE-2017-180336.5 MediumJanuary 18, 2018
atlassian jiraThe Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the...CVE-2017-168655.3 MediumJanuary 17, 2018
atlassian jiraThe issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to...CVE-2017-168646.1 MediumJanuary 12, 2018
atlassian jiraThe IncomingMailServers resource in Atlassian Jira before version 7.6.2 allows remote attackers...CVE-2017-168624.3 MediumJanuary 12, 2018
atlassian jira, jira server +1 moreThe printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from...CVE-2017-145946.1 MediumJanuary 12, 2018
atlassian jiraThe JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML...CVE-2017-5983EPSS 16.2%9.8 CriticalApril 10, 2017
atlassian jiraAtlassian JIRA Server before 7.1.9 has CSRF in auditing/settings.CVE-2016-43198.8 HighApril 10, 2017
atlassian jiraAtlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a...CVE-2016-43184.8 MediumApril 10, 2017
atlassian jiraCross-site scripting (XSS) vulnerability in includes/decorators/global-translations.jsp in...CVE-2016-62856.1 MediumJanuary 31, 2017
atlassian confluence server, jira integration for hipchat +1 moreThe Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before...CVE-2016-66687.5 HighJanuary 23, 2017
atlassian jira core, jira service desk, jira server +2 moreAtlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer...CVE-2015-84813.1 LowJanuary 8, 2016
atlassian jiraDirectory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4...CVE-2014-2314Public exploitEPSS 26.1%4.3 MediumMarch 7, 2014
atlassian jiraDirectory traversal vulnerability in the Importers plugin in Atlassian JIRA before 6.0.5 allows...CVE-2014-23134.3 MediumMarch 7, 2014
atlassian jiraCross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the...CVE-2013-53194.3 MediumAugust 20, 2013
atlassian jira, gliffy, atlassian confluence server +2 moreThe Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does...CVE-2012-29286.4 MediumMay 22, 2012
atlassian bamboo, confluence, crowd +4 more +6 moreAtlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10;...CVE-2012-2926Public exploitEPSS 66.3%9.1 CriticalMay 22, 2012
atlassian jiraAtlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary...CVE-2010-11659.0 HighApril 20, 2010
atlassian jiraMultiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow...CVE-2010-11644.3 MediumApril 20, 2010
atlassian jiraCross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows...CVE-2008-68326.8 MediumJune 8, 2009
atlassian jiraMultiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13...CVE-2008-68314.3 MediumJune 8, 2009
atlassian jiraThe WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers...CVE-2008-65316.8 MediumMarch 26, 2009
atlassian jiraThe Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict...CVE-2007-66197.5 HighJanuary 3, 2008
atlassian jiraJIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared...CVE-2007-66185.0 MediumJanuary 3, 2008
atlassian jiraCross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1...CVE-2007-66174.3 MediumJanuary 3, 2008
atlassian jirasecure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain...CVE-2006-33395.0 MediumJuly 3, 2006
atlassian jiraCross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to...CVE-2006-33382.6 LowJuly 3, 2006