Atlassian

Jira Data Center

79 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2021-26083

  • EPSS 0.26%
  • Veröffentlicht 20.07.2021 04:15:10
  • Zuletzt bearbeitet 21.11.2024 05:55:50

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting ...

5.4

CVE-2021-26082

  • EPSS 0.31%
  • Veröffentlicht 20.07.2021 04:15:10
  • Zuletzt bearbeitet 21.11.2024 05:55:50

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripti...

5.3

CVE-2021-26081

  • EPSS 0.38%
  • Veröffentlicht 20.07.2021 04:15:09
  • Zuletzt bearbeitet 21.11.2024 05:55:50

REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to enumerate usernames via a Sensitive Data Exposure vulnerability in the `/...

6.1

CVE-2021-26080

  • EPSS 0.38%
  • Veröffentlicht 07.06.2021 23:15:08
  • Zuletzt bearbeitet 21.11.2024 05:55:49

EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (...

6.1

CVE-2021-26079

  • EPSS 0.44%
  • Veröffentlicht 07.06.2021 23:15:08
  • Zuletzt bearbeitet 21.11.2024 05:55:49

The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before version 8.13.7, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cr...

5.3

CVE-2020-36289

  • EPSS 90.01%
  • Veröffentlicht 12.05.2021 04:15:07
  • Zuletzt bearbeitet 21.11.2024 05:29:13

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version...

4.3

CVE-2021-26076

  • EPSS 0.33%
  • Veröffentlicht 15.04.2021 00:15:12
  • Zuletzt bearbeitet 21.11.2024 05:55:49

The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.0 allows remote anonymous attackers who can per...

4.3

CVE-2021-26075

  • EPSS 0.46%
  • Veröffentlicht 15.04.2021 00:15:12
  • Zuletzt bearbeitet 21.11.2024 05:55:49

The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from version 8.14.0 before 8.15.1 allowed remote authenticated attackers to obtain the full path o...

6.1

CVE-2020-36288

  • EPSS 1.02%
  • Veröffentlicht 15.04.2021 00:15:12
  • Zuletzt bearbeitet 21.11.2024 05:29:13

The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.1 allows remote attackers to inject arbitrary HTML or JavaScript via a DO...

5.3

CVE-2020-36287

  • EPSS 60.46%
  • Veröffentlicht 09.04.2021 02:15:12
  • Zuletzt bearbeitet 21.11.2024 05:29:13

The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related setting...