CVE-2021-39117
Published Aug 30, 2021The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scr…
Vendor archive
atlassian CVEs
Beta · best-effort471 CVEs tagged to vendor atlassian — 48 Critical, 125 High, 294 Medium, 4 Low, 0 Unrated.
CVE-2021-39113
Published Aug 30, 2021Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access C…
CVE-2021-39111
Published Aug 30, 2021The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version 8.14.0 before 8.18.2 allows remote attackers to injec…
CVE-2021-26084
Published Aug 30, 2021In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confl…
- evidence mentions
- 41
- Buzz score
- 75.0
CVE-2021-39112
Published Aug 25, 2021Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortc…
CVE-2021-26086
Published Aug 16, 2021Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The…
- evidence mentions
- 1
- Buzz score
- 36.9
CVE-2021-26085
Published Aug 3, 2021Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint.…
- evidence mentions
- 1
- Buzz score
- 36.9
CVE-2021-37843
Published Aug 2, 2021The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the username is known (i.e., no other authentication is provided).…
CVE-2017-18113
Published Aug 2, 2021The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator to import their mali…
CVE-2020-36239
Published Jul 29, 2021Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 before 8.17.0 and Jira Service Managemen…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2021-26083
Published Jul 20, 2021Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attac…
CVE-2021-26082
Published Jul 20, 2021The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers…
CVE-2021-26081
Published Jul 20, 2021REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to en…
CVE-2021-26080
Published Jun 7, 2021EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8.14.0 before 8.16.1 allows remote attack…
CVE-2021-26079
Published Jun 7, 2021The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before version 8.13.7, and from version 8.14.0 before 8.17.0…
CVE-2021-26078
Published Jun 7, 2021The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.1…
CVE-2020-36289
Published May 12, 2021Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRender…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-26077
Published May 10, 2021Broken Authentication in Atlassian Connect Spring Boot (ACSB) in version 1.1.0 before 2.1.3 and from version 2.1.4 before 2.1.5: Atlassian Connect Spring Boot is a Java Spring Boo…
CVE-2020-29445
Published May 7, 2021Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and ports via a blind server-side request for…
CVE-2020-29444
Published May 7, 2021Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnerability in admin glob…
CVE-2021-26074
Published Apr 16, 2021Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atl…
CVE-2021-26073
Published Apr 16, 2021Broken Authentication in Atlassian Connect Express (ACE) from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js package for building Atlassian Connect app…
CVE-2021-26076
Published Apr 15, 2021The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.1…
CVE-2021-26075
Published Apr 15, 2021The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from version 8.14.0 before…
CVE-2020-36288
Published Apr 15, 2021The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.1…
Showing 126-150 of 471 CVEsPage 6 of 19