Atlassian

Jira Server

135 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2019-8442

  • EPSS 92.61%
  • Veröffentlicht 22.05.2019 18:29:02
  • Zuletzt bearbeitet 21.11.2024 04:49:54

The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to access files in the Jira webroot under the META-INF direct...

8.1

CVE-2019-8443

  • EPSS 0.78%
  • Veröffentlicht 22.05.2019 18:29:02
  • Zuletzt bearbeitet 21.11.2024 04:49:54

The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers who have obtained access to administrator's session to access the ViewUpgrades admin...

5.3

CVE-2019-3401

  • EPSS 83.31%
  • Veröffentlicht 22.05.2019 18:29:00
  • Zuletzt bearbeitet 21.11.2024 04:42:02

The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

6.1

CVE-2019-3402

  • EPSS 46.35%
  • Veröffentlicht 22.05.2019 18:29:00
  • Zuletzt bearbeitet 21.11.2024 04:42:02

The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwnerUserName ...

5.3

CVE-2019-3403

  • EPSS 82.8%
  • Veröffentlicht 22.05.2019 18:29:00
  • Zuletzt bearbeitet 21.11.2024 04:42:02

The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

6.1

CVE-2019-3400

  • EPSS 0.47%
  • Veröffentlicht 03.05.2019 20:29:01
  • Zuletzt bearbeitet 21.11.2024 04:42:02

The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jql parameter.

5.4

CVE-2018-20239

  • EPSS 0.41%
  • Veröffentlicht 30.04.2019 16:29:00
  • Zuletzt bearbeitet 21.11.2024 04:01:08

Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cro...

7.5

CVE-2019-3399

  • EPSS 0.57%
  • Veröffentlicht 30.04.2019 16:29:00
  • Zuletzt bearbeitet 21.11.2024 04:42:01

The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check.

5.4

CVE-2018-13403

  • EPSS 0.17%
  • Veröffentlicht 13.02.2019 18:29:00
  • Zuletzt bearbeitet 21.11.2024 03:47:02

The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.12.4, and from version 7.13.0 before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross s...

4.1

CVE-2018-13404

  • EPSS 0.15%
  • Veröffentlicht 13.02.2019 18:29:00
  • Zuletzt bearbeitet 21.11.2024 03:47:02

The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from...