Atlassian

Jira

142 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.1

CVE-2018-13404

  • EPSS 0.15%
  • Veröffentlicht 13.02.2019 18:29:00
  • Zuletzt bearbeitet 21.11.2024 03:47:02

The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from...

5.4

CVE-2018-20232

  • EPSS 0.18%
  • Veröffentlicht 13.02.2019 18:29:00
  • Zuletzt bearbeitet 21.11.2024 04:01:08

The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the rendering of retrieved ...

6.1

CVE-2018-13401

  • EPSS 0.09%
  • Veröffentlicht 23.10.2018 13:29:03
  • Zuletzt bearbeitet 21.11.2024 03:47:01

The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7....

6.1

CVE-2018-13402

  • EPSS 0.09%
  • Veröffentlicht 23.10.2018 13:29:03
  • Zuletzt bearbeitet 21.11.2024 03:47:02

Many resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before ve...

6.5

CVE-2018-13400

  • EPSS 0.26%
  • Veröffentlicht 23.10.2018 13:29:02
  • Zuletzt bearbeitet 21.11.2024 03:47:01

Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from versio...

5.3

CVE-2018-13391

  • EPSS 0.16%
  • Veröffentlicht 28.08.2018 12:29:00
  • Zuletzt bearbeitet 21.11.2024 03:47:00

The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and from ver...

6.1

CVE-2018-13395

  • EPSS 0.23%
  • Veröffentlicht 28.08.2018 12:29:00
  • Zuletzt bearbeitet 21.11.2024 03:47:01

Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and before version 7.11.1 a...

5.9

CVE-2017-18104

Exploit
  • EPSS 0.27%
  • Veröffentlicht 24.07.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:22

The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.11.0 allows remote attackers who are able to observe or otherwise intercept webhook events to learn information about changes in issues that should ...

6.1

CVE-2018-5232

  • EPSS 0.23%
  • Veröffentlicht 18.07.2018 14:29:00
  • Zuletzt bearbeitet 21.11.2024 04:08:23

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuetype parameter.

6.1

CVE-2018-13387

  • EPSS 0.19%
  • Veröffentlicht 16.07.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:47:00

The IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3 and from version 7.10.0 before version 7.10.2 al...