99 results · Feed
-
Unscored —
The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, a…
-
Medium 5.3
REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and fro…
-
Unscored —
The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 b…
-
Unscored —
EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before versio…
-
Unscored —CVE-2021-26078 Public exploit
The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 befor…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…
-
Unscored —
The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, fr…
-
Unscored —
The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from …
-
Unscored —
The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before ve…
-
Unscored —CVE-2020-36287 Public exploit
The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center befo…
-
Unscored —
The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before versi…
-
Unscored —
The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before versi…
-
Unscored —
The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before ver…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protecti…
-
Unscored —
The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 befo…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Inf…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field …
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field …
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they s…
-
Unscored —
Affected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permissio…
-
Unscored —
Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Si…
-
Unscored —
Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Ji…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabil…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Info…
-
Unscored —
The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attacker…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project v…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…
-
Unscored —
The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unres…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information witho…
-
Unscored —
The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achi…
-
Unscored —
The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject…
-
Unscored —
This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity temp…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL h…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the i…
-
Unscored —
The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the co…