Advisories · Technology

Atlassian Jira Server and Data Center.

Every CVE that names Atlassian Jira Server and Data Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-4029 CVE record

Atlassian Jira Server and Data Center: The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jul 2020
CVE-2020-4025 CVE record

Atlassian Jira Server and Data Center: The attachment download resource in Atlassian Jira Server and Data Center The attachment…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jul 2020
CVE-2020-4024 CVE record

Atlassian Jira Server and Data Center: The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jul 2020
CVE-2020-4022 CVE record

Atlassian Jira Server and Data Center: The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jul 2020
CVE-2020-14169 CVE record

Atlassian Jira Server and Data Center: The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jul 2020
CVE-2020-14168 CVE record

Atlassian Jira Server and Data Center: The email client in Jira Server and Data Center before version 7.13.16…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jul 2020
CVE-2020-14167 CVE record

Atlassian Jira Server and Data Center: The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jul 2020
CVE-2020-14165 CVE record

Atlassian Jira Server and Data Center: The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jul 2020
CVE-2020-14164 CVE record

Atlassian Jira Server and Data Center: The WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jul 2020
CVE-2020-4028 CVE record

Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers t…
- Atlassian Jira Server and Data Center
Not analysed yet 23 Jun 2020
CVE-2020-4021 CVE record

Atlassian Jira Server and Data Center: Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server…
- Atlassian Jira Server and Data Center
Not analysed yet 1 Jun 2020
CVE-2019-20105 CVE record

Atlassian Application Links: The EditApplinkServlet resource in the Atlassian Application Links plugin before version…
- Atlassian Application Links
- Atlassian Jira Server and Data Center
Not analysed yet 17 Mar 2020
CVE-2019-20106 CVE record

Atlassian Jira Server and Data Center: Comment properties in Atlassian Jira Server and Data Center before version 7.13.12…
- Atlassian Jira Server and Data Center
Not analysed yet 6 Feb 2020
CVE-2019-11581 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Injection in Atlassian Jira Server and Data Center
- Atlassian Jira Server and Data Center
- Other injection
Not analysed yet 9 Aug 2019