Jira Server at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 1 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
99 results · Feed
-
Medium 4.3
An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t requir…
-
Medium 6.1CVE-2022-36801 EPSS 67%
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or…
-
High 7.2CVE-2022-36799 EPSS 47%
This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has…
-
High 7.2
This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissio…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (includin…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread …
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the defaul…
-
High 7.2
Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to exec…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator gr…
-
Unscored —CVE-2021-43942 EPSS 55%
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management acces…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked fro…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit e…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers t…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of …
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of privat…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cro…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL …
-
High 7.2
Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attacker…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames o…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full na…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the applica…
-
Unscored —
The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.1…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via a…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys o…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabil…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving …
-
Unscored —
The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached …
-
Unscored —
The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from v…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL …
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path t…
KEV Nov 12, 2024 -
High 8.8
The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attacke…
-
Unscored —
Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.…