Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Atlassian Jira Data Center, Jira Server 8.13.5, 8.15.1 and 2 more versions Clear all filters
TI-2020-18584 CVE-2020-36286 · GHSA-xmxv-mcf7-rf26

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13…

Priority LOW 27

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determi…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01564 Published 2021-04-01 Fixed in 8.5.13, 8.13.5 +1
TI-2021-08023 CVE-2021-26071 · GHSA-3v9q-ffv3-hg8c

Cross-site request forgery in Atlassian Jira Server

Priority LOW 18

The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to enabl…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00551 Published 2021-04-01 Fixed in 8.5.13, 8.13.5 +1 CWE-352
TI-2020-18558 CVE-2020-36238 · GHSA-4f97-4vq5-662m

Incorrect authorization in Atlassian Jira Server

Priority LOW 27

The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determi…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01704 Published 2021-04-01 Fixed in 8.5.13, 8.13.5 +1 CWE-863