Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Atlassian Jira 7.13.4, 8.0.4 and 2 more versions Clear all filters
TI-2019-06058 CVE-2019-8442 · GHSA-jw47-mjcp-rx65

The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from…

Priority HIGH 67

The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to access files in the Jira web…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.59832 Published 2019-05-22 Fixed in 7.13.4, 8.0.4 +1
TI-2019-06059 CVE-2019-8443 · GHSA-h89j-v7mh-22q2

Improper authentication in Atlassian Jira

Priority MEDIUM 40

The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers who have obtained access to administrator's session to…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02618 Published 2019-05-22 Fixed in 7.13.4, 8.0.4 +1 CWE-287