JI
DevOps
Jira
On CISA KEVExploited in the wild
195
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 27Medium 144Low 3
Watch
Add Jira to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11581 In wildKEV | 9.8 | Aug 9 | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability Affected: 4.4 before 7.6.14; 7.7.0 before 7.13.5; 8.0.0 before 8.0.3; 8.1.0 before 8.1.2; 8.2.0 before 8.2.3 |
| CVE-2022-26136 | 9.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps Affected: 8.13.0 before 8.13.22; 8.14.0 before 8.20.10; 8.21.0 before 8.22.4 |
| CVE-2022-0540 | 9.8 | Apr 20 | A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request Affected: before 8.13.8; 8.14.0 before 8.20.6; 8.21.0 before 8.22.0 |
| CVE-2020-14172 | 9.8 | Jul 3 | This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implemented Affected: before 7.13.0; 8.0.0 before 8.5.0; 8.6.0 before 8.8.1 |
| CVE-2019-20409 | 9.8 | Jun 23 | The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gain remote code execution if they were… Affected: before 8.8.0 |
| CVE-2017-5983 | 9.8 | Apr 10 | The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code,… Affected: 4.2.4; 4.3; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2012-2926 | 9.1 | May 22 | Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo… Affected: before 5.0.1 |
Showing 7