XXE (XML External Entity Injection) in Jira Software Data Center and Server

🗓️ 10 Dec 2025 07:24:22Reported by security-metrics-botType

XXE vulnerability in Jira Software 11.2.0 permits unauthenticated access; upgrade to 11.2.1+.

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts 1.1 Vulnerabilities in IBM Library Support for Struts	16 Jan 202609:15	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts 1.3.10 Vulnerabilities in IBM Library Support for Struts	16 Jan 202609:28	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts Vulnerabilities in IBM Library Support for Struts	13 Mar 202617:06	–	ibm
Circl	CVE-2023-49735	21 Dec 202315:11	–	circl
CNNVD	Apache Tiles Path Traversal Vulnerability	30 Nov 202300:00	–	cnnvd
CVE	CVE-2023-49735	30 Nov 202321:17	–	cve
Cvelist	CVE-2023-49735 Apache Tiles: Unvalidated input may lead to path traversal and XXE	30 Nov 202321:17	–	cvelist
Debian CVE	CVE-2023-49735	30 Nov 202321:17	–	debiancve
Github Security Blog	Apache Tiles: Unvalidated input may lead to path traversal and XXE	1 Dec 202300:31	–	github
Tenable Nessus	Atlassian Jira Service Management Data Center and Server 11.2.0 < 11.2.1 (JSDSERVER-16458)	6 Feb 202600:00	–	nessus