Atlassian

Jira

158 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2018-13400

  • EPSS 1.44%
  • Veröffentlicht 23.10.2018 13:29:02
  • Zuletzt bearbeitet 21.11.2024 03:47:01

Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from versio...

5.3

CVE-2018-13391

  • EPSS 1.8%
  • Veröffentlicht 28.08.2018 12:29:00
  • Zuletzt bearbeitet 21.11.2024 03:47:00

The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and from ver...

6.1

CVE-2018-13395

  • EPSS 1.01%
  • Veröffentlicht 28.08.2018 12:29:00
  • Zuletzt bearbeitet 21.11.2024 03:47:01

Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and before version 7.11.1 a...

5.9

CVE-2017-18104

Exploit
  • EPSS 1.6%
  • Veröffentlicht 24.07.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:22

The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.11.0 allows remote attackers who are able to observe or otherwise intercept webhook events to learn information about changes in issues that should ...

6.1

CVE-2018-5232

  • EPSS 1.01%
  • Veröffentlicht 18.07.2018 14:29:00
  • Zuletzt bearbeitet 21.11.2024 04:08:23

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuetype parameter.

6.1

CVE-2018-13387

  • EPSS 1.45%
  • Veröffentlicht 16.07.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:47:00

The IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3 and from version 7.10.0 before version 7.10.2 al...

7.5

CVE-2018-5231

  • EPSS 2.81%
  • Veröffentlicht 16.05.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 04:08:23

The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of servic...

6.1

CVE-2018-5230

  • EPSS 37.61%
  • Veröffentlicht 14.05.2018 13:29:03
  • Zuletzt bearbeitet 21.11.2024 04:08:23

The issue collector in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to inject arbitrary HTML or JavaScript vi...

6.1

CVE-2017-18100

  • EPSS 0.91%
  • Veröffentlicht 10.04.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:21

The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of quick filters.

6.5

CVE-2017-18101

  • EPSS 1.2%
  • Veröffentlicht 10.04.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:21

Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attack...