MITM (Man-in-the-Middle) org.apache.httpcomponents.client5:httpclient5 Dependency in Jira Software Data Center and Server

🗓️ 05 Jul 2025 05:09:03Reported by security-metrics-botType

High severity MITM vulnerability in Jira Software Data Center and Server versions 9.12.23 to 10.7.0.

Reporter	Title	Published	Views	Family All 41
IBM Security Bulletins	Security Bulletin: A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, which affects IBM watsonx.data	1 Sep 202514:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Improper Access Control vulnerability in Apache HttpClient [CVE-2025-27820]	28 Aug 202517:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team.	9 May 202509:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in httpclient5-5.4.2.jar	11 Jul 202511:33	–	ibm
Atlassian	Third-Party Dependency in Bamboo Data Center and Server	8 Jul 202505:09	–	atlassian
Atlassian	MITM (Man-in-the-Middle) org.apache.httpcomponents.client5:httpclient5 Dependency in Confluence Data Center and Server	2 Jul 202504:09	–	atlassian
Chainguard	CVE-2025-27820 vulnerabilities	26 Apr 202501:14	–	cgr
Circl	CVE-2025-27820	24 Apr 202512:06	–	circl
CNNVD	Apache HttpClient 安全漏洞	24 Apr 202500:00	–	cnnvd
CNVD	Apache HttpClient Logic Error Vulnerability	7 May 202500:00	–	cnvd