Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Atlassian Jira Data Center, Jira Server 8.13.6, 8.16.1 and 2 more versions Clear all filters
TI-2021-08035 CVE-2021-26083 · GHSA-782h-rj36-hv82

Cross-site scripting in Atlassian Jira Server

Priority LOW 25

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScri…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00599 Published 2021-07-20 Fixed in 8.5.14, 8.13.6 +1 CWE-79
TI-2021-08033 CVE-2021-26081 · GHSA-v3g7-jggh-wjhg

REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from…

Priority LOW 33

REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to enumerate usernames via a Sensitive Data Ex…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01268 Published 2021-07-20 Fixed in 8.5.14, 8.13.6 +1