Atlassian

Jira

142 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2021-39117

  • EPSS 0.22%
  • Veröffentlicht 30.08.2021 07:15:06
  • Zuletzt bearbeitet 21.11.2024 06:18:36

The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability via the name of a custom field.

4.9

CVE-2021-39112

  • EPSS 0.28%
  • Veröffentlicht 25.08.2021 03:15:06
  • Zuletzt bearbeitet 21.11.2024 06:18:35

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. The affected versions are before version 8.5.15, from vers...

8.8

CVE-2017-18113

  • EPSS 2.57%
  • Veröffentlicht 02.08.2021 03:15:07
  • Zuletzt bearbeitet 21.11.2024 03:19:23

The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator to import their malicious workflow to execute arbitrary code via a Remote Code Execution (R...

5.4

CVE-2021-26082

  • EPSS 0.31%
  • Veröffentlicht 20.07.2021 04:15:10
  • Zuletzt bearbeitet 21.11.2024 05:55:50

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripti...

5.4

CVE-2021-26083

  • EPSS 0.26%
  • Veröffentlicht 20.07.2021 04:15:10
  • Zuletzt bearbeitet 21.11.2024 05:55:50

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting ...

5.3

CVE-2021-26081

  • EPSS 0.38%
  • Veröffentlicht 20.07.2021 04:15:09
  • Zuletzt bearbeitet 21.11.2024 05:55:50

REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to enumerate usernames via a Sensitive Data Exposure vulnerability in the `/...

6.1

CVE-2021-26078

Exploit
  • EPSS 0.82%
  • Veröffentlicht 07.06.2021 23:15:08
  • Zuletzt bearbeitet 21.11.2024 05:55:49

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via a c...

6.1

CVE-2021-26079

  • EPSS 0.44%
  • Veröffentlicht 07.06.2021 23:15:08
  • Zuletzt bearbeitet 21.11.2024 05:55:49

The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before version 8.13.7, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cr...

5.3

CVE-2020-36289

  • EPSS 90.01%
  • Veröffentlicht 12.05.2021 04:15:07
  • Zuletzt bearbeitet 21.11.2024 05:29:13

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version...

6.1

CVE-2020-36288

  • EPSS 1.02%
  • Veröffentlicht 15.04.2021 00:15:12
  • Zuletzt bearbeitet 21.11.2024 05:29:13

The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.1 allows remote attackers to inject arbitrary HTML or JavaScript via a DO...