mXSS (mutation Cross-Site Scripting) dompurify Dependency in Jira Software Data Center and Server

🗓️ 09 Jan 2026 16:27:48Reported by security-metrics-botType

Critical mXSS in Jira Data Center and Server due to a non-Atlassian dependency; upgrade to 10.3.13 or newer.

Reporter	Title	Published	Views	Family All 133
GithubExploit	Exploit for CVE-2024-47875	2 Sep 202514:50	–	githubexploit
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	20 Nov 202413:56	–	ibm
IBM Security Bulletins	Security Bulletin: Critical Fixes for IBM Storage Defender - Data Protect included in 2.0.15	21 Jul 202516:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in DOMPurify	2 May 202518:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz Reporting Service is affected by Nesting-Based mXSS Vulnerability of DOMPurify	15 Jul 202606:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by a cross-site scripting vulnerability in Navigator for i [CVE-2024-47875]	18 Dec 202522:22	–	ibm
IBM Security Bulletins	Security Bulletin: BM Sterling Connect:Direct Web Services is affected by DOMPurify vulnerability (CVE-2024-47875)	22 Nov 202412:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF006 (July 2025)	8 Aug 202515:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (January 2025)	3 Apr 202523:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	15 Apr 202503:11	–	ibm