Advisories · Technology
Atlassian Jira Software Data Center.
Every CVE that names Atlassian Jira Software Data Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Files accessible to external parties in Atlassian Bamboo Data Center and others
- Atlassian Bamboo Data Center
- Atlassian Bitbucket Data Center
- Information disclosure
- CVSS 8.7 High
Path traversal in Atlassian Jira Software Data Center and others
- Atlassian Jira Software Data Center
- Atlassian Jira Software Server
- Path traversal
- CVSS 8.8 High
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
- CVSS 9.8 CriticalCritical · CVSS 9+
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
- CVSS 6.5 Medium
Server-side request forgery in Atlassian Jira Core Server and others
- Atlassian Jira Core Server
- Atlassian Jira Software Server
- Server-side request forgery (SSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Improper authentication in Atlassian Jira Core Server and others
- Atlassian Jira Core Server
- Atlassian Jira Software Server
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Missing authorization in Atlassian Jira Data Center and others
- Atlassian Jira Data Center
- Atlassian Jira Core Data Center
- Broken access control