Advisories · Technology

Atlassian Jira.

Every CVE that names Atlassian Jira among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-15013 CVE record

Atlassian Jira: The WorkflowResource class removeStatus method in Jira before version 7.13.12…
- Atlassian Jira
Not analysed yet 18 Dec 2019
CVE-2019-8451 CVE record

Atlassian Jira: The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows…
- Atlassian Jira
Not analysed yet 11 Sept 2019
CVE-2019-8450 CVE record

Atlassian Jira: Various templates of the Optimization plugin in Jira before version 7.13.6…
- Atlassian Jira
Not analysed yet 11 Sept 2019
CVE-2019-8449 CVE record

Atlassian Jira: The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote…
- Atlassian Jira
Not analysed yet 11 Sept 2019
CVE-2019-14998 CVE record

Atlassian Jira: The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira…
- Atlassian Jira
Not analysed yet 11 Sept 2019
CVE-2019-14997 CVE record

Atlassian Jira: The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers…
- Atlassian Jira
- CWE-524
Not analysed yet 11 Sept 2019
CVE-2019-14996 CVE record

Atlassian Jira: The FilterPickerPopup.jspa resource in Jira before version 7.13.7…
- Atlassian Jira
Not analysed yet 11 Sept 2019
CVE-2019-14995 CVE record

Incorrect authorization in Atlassian Jira
- Atlassian Jira
- Broken access control
Not analysed yet 11 Sept 2019
CVE-2019-8447 CVE record

Atlassian Jira: The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to…
- Atlassian Jira
Not analysed yet 23 Aug 2019
CVE-2019-8446 CVE record

Incorrect authorization in Atlassian Jira
- Atlassian Jira
- Broken access control
Not analysed yet 23 Aug 2019
CVE-2019-8445 CVE record

Incorrect authorization in Atlassian Jira
- Atlassian Jira
- Broken access control
Not analysed yet 23 Aug 2019
CVE-2019-8444 CVE record

Atlassian Jira: The wikirenderer component in Jira before version 7.13.6…
- Atlassian Jira
Not analysed yet 23 Aug 2019
CVE-2019-11589 CVE record

Atlassian Jira: The ChangeSharedFilterOwner resource in Jira before version 7.13.6…
- Atlassian Jira
Not analysed yet 23 Aug 2019
CVE-2019-11588 CVE record

Atlassian Jira: The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6…
- Atlassian Jira
Not analysed yet 23 Aug 2019
CVE-2019-11587 CVE record

Atlassian Jira: Various exposed resources of the ViewLogging class in Jira before version 7.13.6…
- Atlassian Jira
Not analysed yet 23 Aug 2019
CVE-2019-11586 CVE record

Atlassian Jira: The AddResolution.jspa resource in Jira before version 7.13.6…
- Atlassian Jira
Not analysed yet 23 Aug 2019
CVE-2019-11585 CVE record

Atlassian Jira: The startup.jsp resource in Jira before version 7.13.6…
- Atlassian Jira
Not analysed yet 23 Aug 2019
CVE-2019-11584 CVE record

Atlassian Jira: The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers…
- Atlassian Jira
Not analysed yet 23 Aug 2019
CVE-2019-8448 CVE record

Atlassian Jira: The login.jsp resource in Jira before version 7.13.4…
- Atlassian Jira
Not analysed yet 13 Aug 2019
CVE-2018-20826 CVE record

Incorrect authorization in Atlassian Jira
- Atlassian Jira
- Broken access control
Not analysed yet 9 Aug 2019
CVE-2018-20827 CVE record

Atlassian Jira: The activity stream gadget in Jira before version 7.13.1 allows remote attackers to…
- Atlassian Jira
Not analysed yet 9 Aug 2019
CVE-2019-11583 CVE record

Atlassian Jira: The issue searching component in Jira before version 8.1.0 allows remote attackers to…
- Atlassian Jira
Not analysed yet 26 Jun 2019
CVE-2019-8442 CVE record

Atlassian Jira: The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4…
- Atlassian Jira
Not analysed yet 22 May 2019
CVE-2019-3402 CVE record

Atlassian Jira: The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version…
- Atlassian Jira
Not analysed yet 22 May 2019
CVE-2019-8443 CVE record

Atlassian Jira: The ViewUpgrades resource in Jira before version 7.13.4…
- Atlassian Jira
Not analysed yet 22 May 2019
CVE-2019-3403 CVE record

Incorrect authorization in Atlassian Jira
- Atlassian Jira
- Broken access control
Not analysed yet 22 May 2019
CVE-2019-3401 CVE record

Incorrect authorization in Atlassian Jira
- Atlassian Jira
- Broken access control
Not analysed yet 22 May 2019
CVE-2019-3400 CVE record

Atlassian Jira: The labels gadget in Jira before version 7.13.2…
- Atlassian Jira
Not analysed yet 3 May 2019
CVE-2018-20824 CVE record

Atlassian Jira: The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to…
- Atlassian Jira
Not analysed yet 3 May 2019
CVE-2019-3399 CVE record

Incorrect authorization in Atlassian Jira
- Atlassian Jira
- Broken access control
Not analysed yet 30 Apr 2019
CVE-2018-20232 CVE record

Atlassian Jira: The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0…
- Atlassian Jira
Not analysed yet 13 Feb 2019
CVE-2018-13404 CVE record

Atlassian Jira: The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10…
- Atlassian Jira
Not analysed yet 13 Feb 2019
CVE-2018-13403 CVE record

Atlassian Jira: The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10…
- Atlassian Jira
Not analysed yet 13 Feb 2019
CVE-2018-13402 CVE record

Atlassian Jira: Many resources in Atlassian Jira before version 7.6.9…
- Atlassian Jira
Not analysed yet 23 Oct 2018
CVE-2018-13401 CVE record

Atlassian Jira: The XsrfErrorAction resource in Atlassian Jira before version 7.6.9…
- Atlassian Jira
Not analysed yet 23 Oct 2018
CVE-2018-13400 CVE record

Atlassian Jira: Several administrative resources in Atlassian Jira before version 7.6.9…
- Atlassian Jira
Not analysed yet 23 Oct 2018
CVE-2018-13395 CVE record

Atlassian Jira: Various resources in Atlassian Jira before version 7.6.8…
- Atlassian Jira
Not analysed yet 28 Aug 2018
CVE-2018-13391 CVE record

Atlassian Jira: The ProfileLinkUserFormat component of Jira Server before version 7.6.8…
- Atlassian Jira
Not analysed yet 28 Aug 2018
CVE-2017-18104 CVE record

Atlassian Jira: The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0…
- Atlassian Jira
Not analysed yet 24 Jul 2018
CVE-2018-5232 CVE record

Atlassian Jira: The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0…
- Atlassian Jira
Not analysed yet 18 Jul 2018
CVE-2018-13387 CVE record

Atlassian Jira: The IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7…
- Atlassian Jira
Not analysed yet 16 Jul 2018
CVE-2018-5231 CVE record

Atlassian Jira: The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6…
- Atlassian Jira
Not analysed yet 16 May 2018
CVE-2018-5230 CVE record

Atlassian Jira: The issue collector in Atlassian Jira before version 7.6.6…
- Atlassian Jira
Not analysed yet 14 May 2018
CVE-2017-18101 CVE record

Improper access control in Atlassian Jira
- Atlassian Jira
- Broken access control
Not analysed yet 10 Apr 2018
CVE-2017-18098 CVE record

Atlassian Jira: The searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote…
- Atlassian Jira
Not analysed yet 6 Apr 2018
CVE-2017-18097 CVE record

Atlassian Jira: The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote…
- Atlassian Jira
Not analysed yet 6 Apr 2018
CVE-2017-18039 CVE record

Atlassian Jira: The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version…
- Atlassian Jira
Not analysed yet 2 Feb 2018
CVE-2017-16863 CVE record

Atlassian Jira: The PieChart gadget in Atlassian Jira before version 7.5.3 allows remote attackers to…
- Atlassian Jira
Not analysed yet 18 Jan 2018
CVE-2017-18033 CVE record

Atlassian Jira: The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers…
- Atlassian Jira
Not analysed yet 18 Jan 2018
CVE-2017-16865 CVE record

Atlassian Jira: The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to…
- Atlassian Jira
Not analysed yet 17 Jan 2018
CVE-2017-16864 CVE record

Atlassian Jira: The issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers…
- Atlassian Jira
Not analysed yet 12 Jan 2018
CVE-2017-16862 CVE record

Atlassian Jira: The IncomingMailServers resource in Atlassian Jira before version 7.6.2 allows remote…
- Atlassian Jira
Not analysed yet 12 Jan 2018
CVE-2017-14594 CVE record

Atlassian Jira: The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and…
- Atlassian Jira
Not analysed yet 12 Jan 2018