Advisories · Technology

Atlassian Jira Server.

Every CVE that names Atlassian Jira Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-36235 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 14 Feb 2021
CVE-2020-36231 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 1 Feb 2021
CVE-2020-14185 CVE record

Atlassian Jira Server: Affected versions of Jira Server allow remote unauthenticated attackers to enumerate…
- Atlassian Jira Server
Not analysed yet 15 Oct 2020
CVE-2020-14184 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary…
- Atlassian Jira Server
Not analysed yet 12 Oct 2020
CVE-2020-14183 CVE record

Atlassian Jira Server: Affected versions of Jira Server & Data Center allow a remote attacker with limited…
- Atlassian Jira Server
Not analysed yet 6 Oct 2020
CVE-2020-14177 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 21 Sept 2020
CVE-2020-14179 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote…
- Atlassian Jira Server
Not analysed yet 21 Sept 2020
CVE-2020-14181 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user…
- Atlassian Jira Server
Not analysed yet 17 Sept 2020
CVE-2020-14178 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 1 Sept 2020
CVE-2019-20901 CVE record

The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of perform…
- Atlassian Jira Server
Not analysed yet 13 Jul 2020
CVE-2020-14174 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view…
- Atlassian Jira Server
Not analysed yet 13 Jul 2020
CVE-2019-20900 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 13 Jul 2020
CVE-2019-20899 CVE record

Atlassian Jira Server: The Gadget API in Atlassian Jira Server and Data Center in affected versions allows…
- Atlassian Jira Server
Not analysed yet 13 Jul 2020
CVE-2019-20898 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 13 Jul 2020
CVE-2019-20897 CVE record

Atlassian Jira Server: The avatar upload feature in affected versions of Atlassian Jira Server and Data Center…
- Atlassian Jira Server
Not analysed yet 13 Jul 2020
CVE-2020-14173 CVE record

Atlassian Jira Server: The file upload feature in Atlassian Jira Server and Data Center in affected versions…
- Atlassian Jira Server
Not analysed yet 3 Jul 2020
CVE-2020-14172 CVE record

Atlassian Jira Server: This issue exists to document that a security improvement in the way that Jira Server and…
- Atlassian Jira Server
Not analysed yet 3 Jul 2020
CVE-2019-20419 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 3 Jul 2020
CVE-2019-20418 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 3 Jul 2020
CVE-2019-20408 CVE record

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vul…
- Atlassian Jira Server
Not analysed yet 1 Jul 2020
CVE-2019-20416 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 30 Jun 2020
CVE-2019-20415 CVE record

Atlassian Jira Server: Atlassian Jira Server and Data Center in affected versions allows remote attackers to…
- Atlassian Jira Server
Not analysed yet 30 Jun 2020
CVE-2019-20414 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 29 Jun 2020
CVE-2019-20413 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 29 Jun 2020
CVE-2019-20412 CVE record

Atlassian Jira Server: The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data…
- Atlassian Jira Server
Not analysed yet 29 Jun 2020
CVE-2019-20411 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to…
- Atlassian Jira Server
Not analysed yet 29 Jun 2020
CVE-2019-20410 CVE record

Atlassian Jira Server: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view…
- Atlassian Jira Server
Not analysed yet 29 Jun 2020
CVE-2019-20409 CVE record

Atlassian Jira Server: The way in which velocity templates were used in Atlassian Jira Server and Data Center…
- Atlassian Jira Server
Not analysed yet 23 Jun 2020
CVE-2019-20100 CVE record

The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF).
- Atlassian Application Links
- Atlassian Jira Server
Not analysed yet 12 Feb 2020
CVE-2019-20099 CVE record

Atlassian Jira Server: The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center…
- Atlassian Jira Server
Not analysed yet 12 Feb 2020
CVE-2019-20098 CVE record

Atlassian Jira Server: The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data…
- Atlassian Jira Server
Not analysed yet 12 Feb 2020
CVE-2019-20405 CVE record

Atlassian Jira Server: The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0…
- Atlassian Jira Server
Not analysed yet 6 Feb 2020
CVE-2019-20404 CVE record

Atlassian Jira Server: The API in Atlassian Jira Server and Data Center before version 8.6.0 allows…
- Atlassian Jira Server
Not analysed yet 6 Feb 2020
CVE-2019-20403 CVE record

Atlassian Jira Server: The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote…
- Atlassian Jira Server
Not analysed yet 6 Feb 2020
CVE-2019-20402 CVE record

Atlassian Jira Server: Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be…
- Atlassian Jira Server
Not analysed yet 6 Feb 2020
CVE-2019-20401 CVE record

Various installation setup resources in Jira before version 8.5.2 allow remote attackers to configure a Jira instance, which has not yet finished being installed, via Cross-site request forgery (CSRF…
- Atlassian Jira Server
Not analysed yet 6 Feb 2020
CVE-2019-20400 CVE record

The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directory in the global path environmental variable can inject code into via a DLL hij…
- Atlassian Jira Server
Not analysed yet 6 Feb 2020
CVE-2019-15005 CVE record

Atlassian Bitbucket Server: The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an…
- Atlassian Bitbucket Server
- Atlassian Jira Server
Not analysed yet 8 Nov 2019
CVE-2019-15001 CVE record

Atlassian Jira Server: The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with…
- Atlassian Jira Server
- Atlassian Jira Data Center
Not analysed yet 19 Sept 2019