Skip to contentAtlassian Jira vulnerabilities
- atlassian jira serverThe usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write...CVE-2019-204007.8 High
- atlassian jira, jira server and data center, jira server +2 more +4 moreComment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0...CVE-2019-201064.3 Medium
- atlassian jira, jira server +1 moreThe WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0...CVE-2019-150134.3 Medium
- atlassian bamboo, bitbucket, bitbucket server +8 more +10 moreThe Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an...CVE-2019-150054.3 Medium
- atlassian jira service desk data center, jira service desk server, jira service desk +2 moreThe Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data...CVE-2019-150047.5 High
- atlassian jira service desk data center, jira service desk server, jira service desk +2 moreThe Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data...CVE-2019-150035.3 Medium
- atlassian jira server, jira data center +1 moreThe Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before...CVE-2019-15001EPSS 11.0%7.2 High
- atlassian jira service desk data center, jira service desk server, jira service desk +2 moreThe Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data...CVE-2019-149947.5 High
- atlassian jira, jira server +1 moreThe /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote...CVE-2019-8451Public exploitEPSS 94.5%6.5 Medium
- atlassian jira, jira server +1 moreVarious templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0...CVE-2019-84504.8 Medium
- atlassian jiraThe /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote...CVE-2019-8449Public exploitEPSS 85.7%5.3 Medium
- atlassian jira, jira server +1 moreThe Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before...CVE-2019-149986.5 Medium
- atlassian jira, jira server +1 moreThe AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn...CVE-2019-149974.3 Medium
- atlassian jira, jira server +1 moreThe FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before...CVE-2019-149966.1 Medium
- atlassian jira, jira server +1 moreThe /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers...CVE-2019-149955.3 Medium
- atlassian jira, jira server +1 moreThe ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the...CVE-2019-84474.3 Medium
- atlassian jira, jira server +1 moreThe /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to...CVE-2019-8446EPSS 17.5%5.3 Medium
- atlassian jira, jira server +1 moreSeveral worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before...CVE-2019-84455.3 Medium
- atlassian jira, jira server +1 moreThe wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8...CVE-2019-84445.4 Medium
- atlassian jira, jira server +1 moreThe ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before...CVE-2019-115896.1 Medium
- atlassian jira, jira server +1 moreThe ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8...CVE-2019-115884.3 Medium
- atlassian jira, jira server +1 moreVarious exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8...CVE-2019-115876.5 Medium
- atlassian jira, jira server +1 moreThe AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version...CVE-2019-115864.3 Medium
- atlassian jira, jira server +1 moreThe startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3,...CVE-2019-115856.1 Medium
- atlassian jiraThe MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject...CVE-2019-115846.1 Medium
- atlassian jira, jira server +1 moreThe login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2...CVE-2019-84485.3 Medium
- atlassian jiraThe inline-create rest resource in Jira before version 7.12.3 allows authenticated remote...CVE-2018-208264.3 Medium
- atlassian jiraThe activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject...CVE-2018-208275.4 Medium
- atlassian jira server and data center, jira server +1 moreThere was a server-side template injection vulnerability in Jira Server and Data Center, in the...CVE-2019-11581In KEVPublic exploitEPSS 84.6%9.8 Critical
- softwareag quartz, apache tomee, atlassian jira service management +28 more +30 moreXML external entity injection in Terracotta Quartz SchedulerCVE-2019-13990Public exploitFix availableEPSS 16.6%9.8 Critical
- atlassian jiraThe issue searching component in Jira before version 8.1.0 allows remote attackers to deny access...CVE-2019-115836.5 Medium
- atlassian jira, jira server +1 moreThe CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0...CVE-2019-8442EPSS 59.8%7.5 High
- atlassian jira, jira server +1 moreThe ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0...CVE-2019-34026.1 Medium
- atlassian jira, jira server +1 moreThe ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4,...CVE-2019-84438.1 High
- atlassian jira, jira server +1 moreThe /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0...CVE-2019-3403Public exploitEPSS 53.6%5.3 Medium
- atlassian jira, jira server +1 moreThe ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before...CVE-2019-3401EPSS 13.6%5.3 Medium
- atlassian jira, jira server +1 moreThe labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2...CVE-2019-34006.1 Medium
- atlassian jiraThe WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject...CVE-2018-20824EPSS 38.0%6.1 Medium
- atlassian jira, jira server +1 moreThe BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before...CVE-2019-33997.5 High
- atlassian application links, crowd, crucible +5 more +7 moreApplication Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0...CVE-2018-202395.4 Medium
- atlassian jira, jira server +1 moreThe labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before...CVE-2018-202325.4 Medium
- atlassian jira, jira server +1 moreThe VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7...CVE-2018-134044.1 Medium
- atlassian jira, jira server +1 moreThe two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from...CVE-2018-134035.4 Medium
- atlassian jira, jira server +1 moreMany resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5,...CVE-2018-134026.1 Medium
- atlassian jira, jira server +1 moreThe XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before...CVE-2018-134016.1 Medium
- atlassian jira, jira server +1 moreSeveral administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0...CVE-2018-134004.7 Medium
- atlassian jira, jira server +1 moreVarious resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5...CVE-2018-133956.1 Medium
- atlassian jira, jira server +1 moreThe ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0...CVE-2018-133915.3 Medium
- atlassian jira, jira server +1 moreThe Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before...CVE-2017-181045.9 Medium
- atlassian jira, jira server +1 moreThe EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before...CVE-2018-52326.1 Medium
- Show moreLoading…