Advisories · Technology

Atlassian Jira Data Center.

Every CVE that names Atlassian Jira Data Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-15002 CVE record

CVSS 4.3 Medium

Cross-site request forgery in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Cross-site request forgery (CSRF)
Not analysed yet 11 Feb 2025
CVE-2022-36801 CVE record

CVSS 6.1 Medium

Cross-site scripting in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Cross-site scripting (XSS)
Not analysed yet 10 Aug 2022
CVE-2022-36799 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Code injection in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Code injection
Not analysed yet 1 Aug 2022
CVE-2021-43944 CVE record

CVSS 7.2 High

Code injection in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Code injection
Not analysed yet 8 Mar 2022
CVE-2021-43945 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers with…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 28 Feb 2022
CVE-2021-43941 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 15 Feb 2022
CVE-2021-43953 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 15 Feb 2022
CVE-2021-43952 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 15 Feb 2022
CVE-2021-43947 CVE record

CVSS 7.2 High

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers with…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 6 Jan 2022
CVE-2021-43946 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow authenticated remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 5 Jan 2022
CVE-2021-43942 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 4 Jan 2022
CVE-2021-41311 CVE record

CVSS 7.5 High

Improper authentication in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Authentication bypass
Not analysed yet 8 Dec 2021
CVE-2021-41309 CVE record

CVSS 5.3 Medium

Improper authentication in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Authentication bypass
Not analysed yet 8 Dec 2021
CVE-2021-41312 CVE record

CVSS 7.5 High

Improper authentication in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Authentication bypass
Not analysed yet 3 Nov 2021
CVE-2021-41310 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 1 Nov 2021
CVE-2021-41313 CVE record

Improper authorization in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Broken access control
Not analysed yet 1 Nov 2021
CVE-2021-41308 CVE record

Improper authorization in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Broken access control
Not analysed yet 26 Oct 2021
CVE-2021-41307 CVE record

CVSS 7.5 High

Insecure direct object reference in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Broken access control
Not analysed yet 26 Oct 2021
CVE-2021-41306 CVE record

CVSS 7.5 High

Insecure direct object reference in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Broken access control
Not analysed yet 26 Oct 2021
CVE-2021-41305 CVE record

CVSS 7.5 High

Insecure direct object reference in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Broken access control
Not analysed yet 26 Oct 2021
CVE-2021-41304 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 26 Oct 2021
CVE-2021-39126 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 21 Oct 2021
CVE-2021-39127 CVE record

CVSS 5.3 Medium

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 21 Oct 2021
CVE-2021-39128 CVE record

CVSS 7.2 High

Template injection in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Code injection
Not analysed yet 16 Sept 2021
CVE-2021-39125 CVE record

CVSS 5.3 Medium

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Sept 2021
CVE-2019-20101 CVE record

CVSS 5.3 Medium

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Sept 2021
CVE-2021-39118 CVE record

CVSS 5.3 Medium

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Sept 2021
CVE-2021-39123 CVE record

CVSS 7.5 High

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Sept 2021
CVE-2021-39124 CVE record

Atlassian Jira Server: The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Sept 2021
CVE-2021-39122 CVE record

CVSS 5.3 Medium

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 8 Sept 2021
CVE-2021-39121 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow authenticated remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 8 Sept 2021
CVE-2021-39116 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 8 Sept 2021
CVE-2021-39119 CVE record

CVSS 5.3 Medium

Incorrect authorization in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Broken access control
Not analysed yet 1 Sept 2021
CVE-2021-39117 CVE record

Atlassian Jira Server: The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 30 Aug 2021
CVE-2021-39113 CVE record

CVSS 7.5 High

Insufficient session expiration in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Authentication bypass
Not analysed yet 30 Aug 2021
CVE-2021-39111 CVE record

Atlassian Jira Server: The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 30 Aug 2021
CVE-2021-39112 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
- CWE-1022
Not analysed yet 25 Aug 2021
CVE-2021-26086 CVE record

CVSS 5.3 MediumCritical · KEVKEV

Path traversal in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Path traversal
Not analysed yet 16 Aug 2021
CVE-2017-18113 CVE record

CVSS 8.8 High

Code injection in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Code injection
Not analysed yet 2 Aug 2021
CVE-2020-36239 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Missing authorization in Atlassian Jira Data Center and others
- Atlassian Jira Data Center
- Atlassian Jira Core Data Center
- Broken access control
Not analysed yet 29 Jul 2021
CVE-2021-26083 CVE record

Atlassian Jira Server: Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 20 Jul 2021
CVE-2021-26082 CVE record

Atlassian Jira Server: The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 20 Jul 2021
CVE-2021-26081 CVE record

CVSS 5.3 Medium

Atlassian Jira Server: REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 20 Jul 2021
CVE-2021-26079 CVE record

Atlassian Jira Server: The CardLayoutConfigTable component in Jira Server and Jira Data Center before version…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 7 Jun 2021
CVE-2021-26080 CVE record

Atlassian Jira Server: EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 7 Jun 2021
CVE-2021-26078 CVE record

Atlassian Jira Server: The number range searcher component in Jira Server and Jira Data Center before version…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 7 Jun 2021
CVE-2020-36289 CVE record

CVSS 5.3 Medium

Incorrect authorization in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Broken access control
Not analysed yet 12 May 2021
CVE-2021-26076 CVE record

Atlassian Jira Server: The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Apr 2021
CVE-2021-26075 CVE record

Atlassian Jira Server: The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Apr 2021
CVE-2020-36288 CVE record

Atlassian Jira Server: The issue navigation and search view in Jira Server and Data Center before version…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Apr 2021
CVE-2020-36287 CVE record

Incorrect authorization in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Broken access control
Not analysed yet 9 Apr 2021
CVE-2020-36286 CVE record

Atlassian Jira Server: The membersOf JQL search function in Jira Server and Data Center before version 8.5.13…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 1 Apr 2021
CVE-2021-26071 CVE record

Atlassian Jira Server: The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 1 Apr 2021
CVE-2020-36238 CVE record

Incorrect authorization in Atlassian Jira Server and others
- Atlassian Jira Server
- Atlassian Jira Data Center
- Broken access control
Not analysed yet 1 Apr 2021
CVE-2021-26069 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 22 Mar 2021
CVE-2021-26070 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 22 Mar 2021
CVE-2020-29453 CVE record

Atlassian Jira Server: The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 18 Feb 2021
CVE-2020-29451 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 15 Feb 2021
CVE-2020-36234 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 15 Feb 2021
CVE-2020-36237 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Feb 2021