Atlassian Jira Server and Data Center
14 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-4029 | unspecified – < 8.5.5 ; 8.6.0 – < unspecified ; unspecified – < 8.7.2 ; … | The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2 | MEDIUM 4.3 | 1.4 % | ||
| CVE-2020-4025 | unspecified – < 8.5.5 ; 8.6.0 – < unspecified ; unspecified – < 8.8.1 ; … | The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data | MEDIUM 4.8 | 0.9 % | ||
| CVE-2020-4024 | unspecified – < 8.5.5 ; 8.6.0 – < unspecified ; unspecified – < 8.8.2 ; … | The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8 | MEDIUM 5.4 | 0.9 % | ||
| CVE-2020-4022 | unspecified – < 8.5.5 ; 8.6.0 – < unspecified ; unspecified – < 8.8.2 ; … | The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8 | MEDIUM 6.1 | 1.1 % | ||
| CVE-2020-14169 | unspecified – < 8.9.1 | The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScr | MEDIUM 6.1 | 0.8 % | ||
| CVE-2020-14168 | unspecified – < 7.13.16 ; 8.5.0 – < unspecified ; unspecified – < 8.5.7 ; … | The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 bef | MEDIUM 5.9 | 1.7 % | ||
| CVE-2020-14167 | unspecified – < 7.13.14 ; 8.5.0 – < unspecified ; unspecified – < 8.5.5 ; … | The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, a | HIGH 7.5 | 2.1 % | ||
| CVE-2020-14165 | unspecified – < 8.9.0 | The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain inform | MEDIUM 5.3 | 1.0 % | ||
| CVE-2020-14164 | unspecified – < 8.8.2 | The WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows remote attackers to inject arbitrary HTML or JavaScri | MEDIUM 6.1 | 0.7 % | ||
| CVE-2020-4028 | unspecified – < 8.9.1 | Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in som | MEDIUM 5.3 | 0.9 % | ||
| CVE-2020-4021 | unspecified – < 8.5.5 ; 8.6.0 – < unspecified ; unspecified – < 8.8.1 | Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject a | MEDIUM 5.4 | 1.0 % | ||
| CVE-2019-20105 | 7.13.8 – < unspecified ; unspecified – < 7.13.12 ; 8.4.2 – < unspecified ; … | The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, f | MEDIUM 4.9 | 1.5 % | ||
| CVE-2019-20106 | unspecified – < 7.13.12 ; 8.4.1 – < unspecified ; unspecified – < 8.5.4 ; … | Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before versio | MEDIUM 4.3 | 1.1 % | ||
| CVE-2019-11581 | 4.4.0 – < unspecified ; unspecified – < 7.6.14 ; 7.7.0 – < unspecified ; … | There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail a | CRITICAL 9.8 | 85 % | KEV |