Data Center (Atlassian) - vulnerabilities (CVEs)

38 CVEs, 0 in the last 30 days, 43 known versions, newest CVE from 2022-02-28. Vendor: Atlassian.

CVEs of Data Center

CVE-2021-43945 - CVSS 4.8 (medium), 2022-02-28: Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrary HTML or…
CVE-2021-43953 - CVSS 4.3 (medium), 2022-02-15: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings…
CVE-2021-43947 - CVSS 7.2 (high), 2022-01-06: Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitrary code via a Remote Code…
CVE-2021-41312 - CVSS 7.5 (high), 2021-11-03: Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and…
CVE-2021-41304 - CVSS 6.1 (medium), 2021-10-26: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting…
CVE-2021-39125 - CVSS 5.3 (medium), 2021-09-14: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users via an enumeration…
CVE-2021-39124 - CVSS 4.3 (medium), 2021-09-14: The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are…
CVE-2021-39118 - CVSS 5.3 (medium), 2021-09-14: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an enumeration…
CVE-2021-39123 - CVSS 7.5 (high), 2021-09-14: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of…
CVE-2019-20101 - CVSS 5.3 (medium), 2021-09-14: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulnerability…
CVE-2021-39121 - CVSS 4.3 (medium), 2021-09-08: Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an…
CVE-2021-39122 - CVSS 5.3 (medium), 2021-09-08: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability…
CVE-2021-39119 - CVSS 5.3 (medium), 2021-09-01: Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after their…
CVE-2021-39111 - CVSS 6.1 (medium), 2021-08-30: The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version 8.14.0 before 8.18.2 allows…
CVE-2021-39117 - CVSS 4.8 (medium), 2021-08-30: The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript…
CVE-2021-39113 - CVSS 7.5 (high), 2021-08-30: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions,…
CVE-2021-39112 - CVSS 4.8 (medium), 2021-08-25: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability…
CVE-2017-18113 - CVSS 8.8 (high), 2021-08-02: The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator…
CVE-2021-26083 - CVSS 5.4 (medium), 2021-07-20: Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before…
CVE-2021-26082 - CVSS 5.4 (medium), 2021-07-20: The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0…
CVE-2021-26081 - CVSS 5.3 (medium), 2021-07-20: REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows…
CVE-2021-26079 - CVSS 6.1 (medium), 2021-06-07: The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before version 8.13.7, and from version…
CVE-2021-26078 - CVSS 6.1 (medium), 2021-06-07: The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version…
CVE-2020-36289 - CVSS 5.3 (medium), 2021-05-12: Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the…
CVE-2021-26076 - CVSS 3.7 (low), 2021-04-15: The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4,…
CVE-2021-26075 - CVSS 4.3 (medium), 2021-04-15: The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from…
CVE-2020-36288 - CVSS 6.1 (medium), 2021-04-15: The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0…
CVE-2020-36287 - CVSS 5.3 (medium), 2021-04-09: The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version…
CVE-2021-26071 - CVSS 3.5 (low), 2021-04-01: The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0…
CVE-2020-36286 - CVSS 5.3 (medium), 2021-04-01: The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0…
CVE-2020-36238 - CVSS 5.3 (medium), 2021-04-01: The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0…
CVE-2021-26070 - CVSS 7.2 (high), 2021-03-22: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protection of app-linked resources via a Broken…
CVE-2021-26069 - CVSS 5.3 (medium), 2021-03-22: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via…
CVE-2020-29453 - CVSS 5.3 (medium), 2021-02-22: The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before…
CVE-2020-29451 - CVSS 4.3 (medium), 2021-02-15: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Information Disclosure vulnerability in…
CVE-2020-36237 - CVSS 5.3 (medium), 2021-02-15: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure…
CVE-2020-36234 - CVSS 4.8 (medium), 2021-02-15: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS)…
CVE-2020-14181 - CVSS 5.3 (medium), 2020-09-17: Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the…