Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-11581
HistoryAug 09, 2019 - 8:15 p.m.

CVE-2019-11581

2019-08-0920:15:11
CWE-74
[email protected]
web.nvd.nist.gov
7

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.973

Percentile

99.9%

JSON

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and Data Center from 4.4.0 before 7.6.14, from 7.7.0 before 7.13.5, from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability.

Affected configurations

Nvd
Node
atlassianjiraRange4.4–7.6.14
OR
atlassianjira_serverRange7.7.0–7.13.5
OR
atlassianjira_serverRange8.0.0–8.0.3
OR
atlassianjira_serverRange8.1.0–8.1.2
OR
atlassianjira_serverRange8.2.0–8.2.3
VendorProductVersionCPE
atlassianjira*cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
atlassianjira_server*cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*

Related

githubexploit 3
checkpoint_advisories 1
nuclei 1
cvelist 1
attackerkb 1
atlassian 2
cisa_kev 1
nessus 2
prion 1
cve 1
thn 2
threatpost 1
cisa 1
githubexploit
githubexploit
Exploit for Injection in Atlassian Jira Server
2021-05-04 06:30:47
Exploit for Injection in Atlassian Jira Server
2019-07-16 02:27:00
Exploit for Code Injection in Atlassian Jira Service Desk
2021-09-07 09:03:35
checkpoint_advisories
checkpoint_advisories
Atlassian Jira Server Remote Code Execution (CVE-2019-11581)
2019-07-17 00:00:00
nuclei
nuclei
Atlassian Jira Server-Side Template Injection
2020-12-05 08:51:54
cvelist
cvelist
CVE-2019-11581
2019-08-09 19:30:59
attackerkb
attackerkb
CVE-2019-11581 — Atlassian JIRA Template injection vulnerability RCE
2019-08-09 00:00:00
atlassian
atlassian
CVE-2019-11581 - Template injection in various resources
2019-06-26 05:27:16
CVE-2019-11581 - Template injection in various resources
2019-06-26 05:27:16
cisa_kev
cisa_kev
Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
2022-03-07 00:00:00
nessus
nessus
Atlassian JIRA Server & JIRA Data Center Template Injection Vulnerability
2019-07-11 00:00:00
Atlassian JIRA Server Template Injection Vulnerability (CVE-2019-11581)
2019-09-13 00:00:00
prion
prion
Sql injection
2019-08-09 20:15:00
cve
cve
CVE-2019-11581
2019-08-09 20:15:11
thn
thn
Hezbollah Hacker Group Targeted Telecoms, Hosting, ISPs Worldwide
2021-01-29 10:08:00
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
threatpost
threatpost
Hezbollah-Linked Lebanese Cedar APT Infiltrates Hundreds of Servers
2021-02-01 21:18:09
cisa
cisa
CISA Adds 11 Known Exploited Vulnerabilities to Catalog 
2022-03-07 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.973

Percentile

99.9%

JSON
Related for NVD:CVE-2019-11581
githubexploit3checkpoint_advisories1nuclei1cvelist1attackerkb1atlassian2cisa_kev1nessus2prion1cve1thn2threatpost1cisa1