Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Atlassian Jira Server 8.6.0 Clear all filters
TI-2019-14639 CVE-2019-20405 · GHSA-fqgg-47vq-qpg3

Cross-site request forgery in Atlassian Jira Server

Priority LOW 21

The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request forgery (CSRF) vulnerability.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00552 Published 2020-02-06 Fixed in 8.6.0 CWE-352
TI-2019-14638 CVE-2019-20404 · GHSA-8m4x-phmq-q73v

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows…

Priority LOW 23

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determine project titles they do not have access to via an improper authorization vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01297 Published 2020-02-06 Fixed in 8.6.0
TI-2019-14636 CVE-2019-20402 · GHSA-wwjm-wrhr-958r

Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be…

Priority LOW 24

Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Administrator user without requiring the user to re-enter their password via an improper authorization vulne…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00766 Published 2020-02-06 Fixed in 8.6.0