Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Atlassian Jira Server 7.13.9, 8.4.2, unspecified Clear all filters
TI-2019-14648 CVE-2019-20414 · GHSA-cjm2-9754-2rcj

Cross-site scripting in Atlassian Jira Server

Priority LOW 27

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in Issue Navigator Basic Search.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01047 Published 2020-06-29 Fixed in 7.13.9, 8.4.2 CWE-79
TI-2019-14646 CVE-2019-20412 · GHSA-4r95-5hvx-m4wp

Improper authentication in Atlassian Jira Server

Priority LOW 28

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names;…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02016 Published 2020-06-29 Fixed in 7.13.9, 8.4.2 CWE-287
TI-2019-14645 CVE-2019-20411 · GHSA-pmcv-jjqh-3g6v

Cross-site request forgery in Atlassian Jira Server

Priority LOW 21

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery (CSRF) vulnerability.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00684 Published 2020-06-29 Fixed in 7.13.9, 8.4.2 CWE-352