Data Center
Atlassian · 38 CVEs
Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissio…
Feb 28, 2022
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread…
Feb 15, 2022
Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to exec…
Jan 6, 2022
Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked fro…
Nov 3, 2021
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or…
Oct 26, 2021
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames o…
Sep 14, 2021
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via…
Sep 14, 2021
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full na…
Sep 14, 2021
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the applica…
Sep 14, 2021
The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.1…
Sep 14, 2021
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via a…
Sep 8, 2021
Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys o…
Sep 8, 2021
Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving…
Sep 1, 2021
The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers…
Aug 30, 2021
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached…
Aug 30, 2021
The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from v…
Aug 30, 2021
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL…
Aug 25, 2021
The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attacke…
Aug 2, 2021
Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.…
Jul 20, 2021
The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, a…
Jul 20, 2021
REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and fro…
Jul 20, 2021
The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 b…
Jun 7, 2021
The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 befor…
Jun 7, 2021
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…
May 12, 2021
The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, fr…
Apr 14, 2021
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2021-43945 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrary HTML or JavaScrip… | MEDIUM | 0.57% | Feb 28, 2022 |
| CVE-2021-43953 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings v… | MEDIUM | 0.48% | Feb 15, 2022 |
| CVE-2021-43947 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitrary code via a Remote Code Exe… | HIGH | 4.12% | Jan 6, 2022 |
| CVE-2021-41312 | Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and… | HIGH | 1.21% | Nov 3, 2021 |
| CVE-2021-41304 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (… | MEDIUM | 0.88% | Oct 26, 2021 |
| CVE-2021-39125 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users via an enumeration vulnerability… | MEDIUM | 1.40% | Sep 14, 2021 |
| CVE-2019-20101 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulnerability i… | MEDIUM | 1.38% | Sep 14, 2021 |
| CVE-2021-39118 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an enumeration vulnerab… | MEDIUM | 1.42% | Sep 14, 2021 |
| CVE-2021-39123 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Serv… | HIGH | 1.60% | Sep 14, 2021 |
| CVE-2021-39124 | The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able… | MEDIUM | 0.53% | Sep 14, 2021 |
| CVE-2021-39122 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability i… | MEDIUM | 1.90% | Sep 8, 2021 |
| CVE-2021-39121 | Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Informati… | MEDIUM | 1.55% | Sep 8, 2021 |
| CVE-2021-39119 | Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after their Ji… | MEDIUM | 0.75% | Sep 1, 2021 |
| CVE-2021-39117 | The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript… | MEDIUM | 0.64% | Aug 30, 2021 |
| CVE-2021-39113 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, v… | HIGH | 2.46% | Aug 30, 2021 |
| CVE-2021-39111 | The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version 8.14.0 before 8.18.2 allows remot… | MEDIUM | 1.33% | Aug 30, 2021 |
| CVE-2021-39112 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability i… | MEDIUM | 0.99% | Aug 25, 2021 |
| CVE-2017-18113 | The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator… | HIGH | 1.80% | Aug 2, 2021 |
| CVE-2021-26083 | Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1… | MEDIUM | 0.60% | Jul 20, 2021 |
| CVE-2021-26082 | The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 all… | MEDIUM | 1.00% | Jul 20, 2021 |
| CVE-2021-26081 | REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows re… | MEDIUM | 1.18% | Jul 20, 2021 |
| CVE-2021-26079 | The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before version 8.13.7, and from version 8… | MEDIUM | 1.24% | Jun 7, 2021 |
| CVE-2021-26078 | The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.… | MEDIUM | 4.03% | Jun 7, 2021 |
| CVE-2020-36289 | Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the… | MEDIUM | 99.21% | May 12, 2021 |
| CVE-2021-26076 | The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4,… | LOW | 1.23% | Apr 14, 2021 |
Showing 1 to 25 of 38 CVEs