9.8

CVE-2017-5983

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Atlassian ≫ Jira Version4.2.4
Atlassian ≫ Jira Version4.3
Atlassian ≫ Jira Version4.3.1
Atlassian ≫ Jira Version4.3.2
Atlassian ≫ Jira Version4.3.3
Atlassian ≫ Jira Version4.3.4
Atlassian ≫ Jira Version4.4
Atlassian ≫ Jira Version4.4.1
Atlassian ≫ Jira Version4.4.2
Atlassian ≫ Jira Version4.4.3
Atlassian ≫ Jira Version4.4.4
Atlassian ≫ Jira Version4.4.5
Atlassian ≫ Jira Version5.0
Atlassian ≫ Jira Version5.0.1
Atlassian ≫ Jira Version5.0.2
Atlassian ≫ Jira Version5.0.3
Atlassian ≫ Jira Version5.0.4
Atlassian ≫ Jira Version5.0.5
Atlassian ≫ Jira Version5.0.7
Atlassian ≫ Jira Version5.1
Atlassian ≫ Jira Version5.1.1
Atlassian ≫ Jira Version5.1.2
Atlassian ≫ Jira Version5.1.3
Atlassian ≫ Jira Version5.1.4
Atlassian ≫ Jira Version5.1.5
Atlassian ≫ Jira Version5.1.6
Atlassian ≫ Jira Version5.1.7
Atlassian ≫ Jira Version5.1.8
Atlassian ≫ Jira Version5.2
Atlassian ≫ Jira Version5.2.1
Atlassian ≫ Jira Version5.2.2
Atlassian ≫ Jira Version5.2.3
Atlassian ≫ Jira Version5.2.4
Atlassian ≫ Jira Version5.2.5
Atlassian ≫ Jira Version5.2.6
Atlassian ≫ Jira Version5.2.7
Atlassian ≫ Jira Version5.2.8
Atlassian ≫ Jira Version5.2.9
Atlassian ≫ Jira Version5.2.10
Atlassian ≫ Jira Version5.2.11
Atlassian ≫ Jira Version6.0
Atlassian ≫ Jira Version6.0.1
Atlassian ≫ Jira Version6.0.2
Atlassian ≫ Jira Version6.0.3
Atlassian ≫ Jira Version6.0.4
Atlassian ≫ Jira Version6.0.5
Atlassian ≫ Jira Version6.0.7
Atlassian ≫ Jira Version6.0.8
Atlassian ≫ Jira Version6.1
Atlassian ≫ Jira Version6.1.1
Atlassian ≫ Jira Version6.1.2
Atlassian ≫ Jira Version6.1.3
Atlassian ≫ Jira Version6.1.4
Atlassian ≫ Jira Version6.1.5
Atlassian ≫ Jira Version6.1.6
Atlassian ≫ Jira Version6.1.7
Atlassian ≫ Jira Version6.1.8
Atlassian ≫ Jira Version6.1.9
Atlassian ≫ Jira Version6.2
Atlassian ≫ Jira Version6.2.1
Atlassian ≫ Jira Version6.2.2
Atlassian ≫ Jira Version6.2.3
Atlassian ≫ Jira Version6.2.4
Atlassian ≫ Jira Version6.2.5
Atlassian ≫ Jira Version6.2.6
Atlassian ≫ Jira Version6.2.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.39% 0.919
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

http://www.securityfocus.com/bid/97379
Third Party Advisory
VDB Entry
https://www.kb.cert.org/vuls/id/307983
Third Party Advisory
US Government Resource
VDB Entry