Atlassian

Jira Server

135 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-39113

  • EPSS 0.56%
  • Veröffentlicht 30.08.2021 07:15:06
  • Zuletzt bearbeitet 21.11.2024 06:18:35

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions ar...

4.9

CVE-2021-39112

  • EPSS 0.28%
  • Veröffentlicht 25.08.2021 03:15:06
  • Zuletzt bearbeitet 21.11.2024 06:18:35

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. The affected versions are before version 8.5.15, from vers...

5.3

CVE-2021-26086

Warnung Exploit
  • EPSS 94.19%
  • Veröffentlicht 16.08.2021 01:15:06
  • Zuletzt bearbeitet 24.10.2025 13:38:33

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The affected versions are before version 8.5.14, from version 8.6.0 before...

5.4

CVE-2021-26082

  • EPSS 0.31%
  • Veröffentlicht 20.07.2021 04:15:10
  • Zuletzt bearbeitet 21.11.2024 05:55:50

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripti...

5.4

CVE-2021-26083

  • EPSS 0.26%
  • Veröffentlicht 20.07.2021 04:15:10
  • Zuletzt bearbeitet 21.11.2024 05:55:50

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting ...

5.3

CVE-2021-26081

  • EPSS 0.38%
  • Veröffentlicht 20.07.2021 04:15:09
  • Zuletzt bearbeitet 21.11.2024 05:55:50

REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to enumerate usernames via a Sensitive Data Exposure vulnerability in the `/...

6.1

CVE-2021-26078

Exploit
  • EPSS 0.82%
  • Veröffentlicht 07.06.2021 23:15:08
  • Zuletzt bearbeitet 21.11.2024 05:55:49

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via a c...

6.1

CVE-2021-26079

  • EPSS 0.44%
  • Veröffentlicht 07.06.2021 23:15:08
  • Zuletzt bearbeitet 21.11.2024 05:55:49

The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before version 8.13.7, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cr...

6.1

CVE-2021-26080

  • EPSS 0.38%
  • Veröffentlicht 07.06.2021 23:15:08
  • Zuletzt bearbeitet 21.11.2024 05:55:49

EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (...

5.3

CVE-2020-36289

  • EPSS 90.01%
  • Veröffentlicht 12.05.2021 04:15:07
  • Zuletzt bearbeitet 21.11.2024 05:29:13

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version...