JD
Product
Jira Data Center
On CISA KEVExploited in the wild
80
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 3High 14Medium 61Low 2
Watch
Add Jira Data Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-36231 | 4.3 | Feb 2 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure Direct Object… Affected: 8.6.0 before 8.13.2; 8.13.3 |
| CVE-2020-14174 | 4.3 | Jul 13 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability… Affected: 8.0.0 before 8.5.7; 8.6.0 before 8.9.2; 8.10.0 |
| CVE-2020-4029 | 4.3 | Jul 1 | The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows… Affected: 8.6.0 before 8.7.2; 8.8.0 before 8.8.1 |
| CVE-2019-20415 | 4.3 | Jun 30 | Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability Affected: 8.0.0 before 8.1.0 |
| CVE-2019-20411 | 4.3 | Jun 29 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery (CSRF) vulnerability Affected: 7.7.0 before 7.13.9; 8.0.0 before 8.4.2 |
| CVE-2019-20407 | 4.3 | Mar 17 | The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information… Affected: 8.4.1 before 8.5.3; 8.5.4 before 8.6.1; after 8.6.2 before 8.7.0 |
| CVE-2019-20099 | 4.3 | Feb 12 | The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF) Affected: 7.6.15 before 8.5.4; 8.5.5 before 8.6.2 |
| CVE-2019-20098 | 4.3 | Feb 12 | The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF) Affected: 7.6.15 before 8.5.4; 8.5.5 before 8.6.2 |
| CVE-2019-20405 | 4.3 | Feb 6 | The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request… Affected: 7.13.0 before 8.6.0 |
| CVE-2019-20404 | 4.3 | Feb 6 | The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determine project titles they do not have access to via an improper… Affected: 8.2.4 before 8.6.0; 8.6.1 before 8.7.0 |
| CVE-2019-20106 | 4.3 | Feb 6 | Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make… Affected: 8.0.0 before 8.5.4; 8.6.0 |