Atlassian Jira Data Center vulnerabilities

102 known vulnerabilities affecting atlassian/jira_data_center.

Total CVEs

102

CISA KEV

1

actively exploited

Public exploits

7

Exploited in wild

1

Severity breakdown

CRITICAL3HIGH22MEDIUM75LOW2

Vulnerabilities

Page 6 of 6

CVE-2019-15001HIGHCVSS 7.2≥ 7.0.10, < 7.6.16≥ 7.7.0, < 7.13.8+16 more2019-09-19

CVE-2019-15001 [HIGH] CWE-94 CVE-2019-15001: The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7. The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0.0 before 8.1.3, from 8.2.0 before 8.2.5, from 8.3.0 before 8.3.4 and from 8.4.0 before 8.4.1 allows remote attackers with Administrator permissions to gain remote code execution via a template injection vulnerabil

CVE-2018-20239MEDIUMCVSS 5.4fixed in 7.13.3≥ 8.0.0, < 8.1.02019-04-30

CVE-2018-20239 [MEDIUM] CWE-79 CVE-2018-20239: Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the applinkStartingUrl parameter. The product is used as a pl

← Previous6 / 6