Atlassian Jira 7.0.6 < 7.13.16 Disclosure Of Private Project Titles

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 7.0.6 prior to version 7.13.16, 8.0.0 prior to 8.5.7, 8.6.0 prior to 8.9.2 or 8.10.0 prior to 8.10.1. It is, therefore, affected by a vulnerability which allow remote attackers to view...

Atlassian Jira < 6.0.4 Directory Traversal In Issue Collector

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 6.0.4. It is, therefore, affected by a directory traversal in the Issue Collector component. Note that the scanner has not tested for these issues but has instead relied only ...

Atlassian Jira < 3.7.1 Giffy Plugin Arbitrary File Read

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 3.7.1. It is, therefore, affected by a vulnerability in the giffy plugin which allows remote attackers to read arbitrary files or cause a denial of service resource consumptio...

Atlassian Jira 7.0.6 < 8.5.4 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is version 7.0.6 prior to 8.5.4 or 8.6.x prior to 8.7.1. It is, therefore, affected by multiple vulnerabilities: - A flaw which permits remote attackers to achieve Denial of Service via a...

Atlassian Jira 8.6.0 < 8.9.2 Disclosure Of Private Project Titles

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 7.0.6 prior to version 7.13.16, 8.0.0 prior to 8.5.7, 8.6.0 prior to 8.9.2 or 8.10.0 prior to 8.10.1. It is, therefore, affected by a vulnerability which allow remote attackers to view...

Atlassian Jira 8.0.0 < 8.5.4 Comment Permissions Broken Access Control

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 7.13.12, 8.0.0 prior to 8.5.4 or 8.6.0 prior to 8.6.1. It is, therefore, affected by a vulnerability which permits remote attackers to make comments on a ticket to whi...

Atlassian Jira 8.6.0 < 8.7.2 Improper Authorization On Createshared Endpoint

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.8.1. It is, therefore, affected by a flaw which permits remote attackers remote attackers to enumerate project names via an improper authorization vulnerability in the...

Atlassian Jira 8.6.0 < 8.8.2 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 8.5.5, 8.6.0 prior to 8.8.2 or 8.9.0 prior to 8.9.1. It is, therefore, affected by multiple vulnerabilities: - A flaw which allows remote attackers to inject arbitrary...

Atlassian Jira 8.6.0 < 8.8.2 Xss In Issue Attachments

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.9.1. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability issue...

Atlassian Jira 7.12 < 7.13.2 Information Disclosure In Browseprojects.jspa Resource

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 7.12.x prior to 7.13.2 or 8.0.0 prior to 8.0.2. It is, therefore, affected by a vulnerability which permits remote attackers to see information for archived projects through a missing...

Atlassian Jira 8.0.0 < 8.0.2 Information Disclosure In Browseprojects.jspa Resource

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 7.12.x prior to 7.13.2 or 8.0.0 prior to 8.0.2. It is, therefore, affected by a vulnerability which permits remote attackers to see information for archived projects through a missing...

Atlassian Jira 6.5.x < 6.5.0.2 Software Tempo Plugin Xml Denial Of Service

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 6.0.5. It is, therefore, affected by a issue in the TM Software Tempo Plugin which does not properly restrict the capabilities of 3rd party XML parsers, which allows remote...

Atlassian Jira 8.9.0 < 8.9.1 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 8.5.5, 8.6.0 prior to 8.8.2 or 8.9.0 prior to 8.9.1. It is, therefore, affected by multiple vulnerabilities: - A flaw which allows remote attackers to inject arbitrary...

Atlassian Jira 8.5.0 < 8.5.5 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.7. It is, therefore, affected by multiple vulnerabilities: - A vulnerability which permits remote attackers to access outgoing emails between a Jira instance and the SMTP...

Atlassian Jira < 8.7.0

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.7.0. It is, therefore, affected by a vulnerability which permits remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF...

Atlassian Jira 7.13.0 < 7.13.9 Csrf On Wallboard Endpoint

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.0. It is, therefore, affected by a vulnerability which permits remote attackers to modify Wallboard settings via a Cross-site request forgery CSRF vulnerability. Note that...

Atlassian Jira 7.0.8 < 7.13.9 DoS Via Missing Input Validation In Userpickerbrowser

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is version 7.0.8 prior to 7.13.9 or 8.0.0 prior to 8.5.0. It is, therefore, affected by a vulnerability which permits remote attackers to impact the application's availability via a Denia...

Atlassian Jira < 7.13.12 Comment Permissions Broken Access Control

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 7.13.12, 8.0.0 prior to 8.5.4 or 8.6.0 prior to 8.6.1. It is, therefore, affected by a vulnerability which permits remote attackers to make comments on a ticket to whi...

Atlassian Jira 8.5.0 < 8.5.2 Improper Authorization In Workflowresource Class

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 7.13.12 , 8.0.0 prior to 8.4.3 or 8.5.0 prior to 8.5.2. It is, therefore, affected by a vulnerability which permits authenticated remote attackers who do not have...

Atlassian Jira < 6.0.5 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 6.0.5. It is, therefore, affected by multiple vulnerabilities: - A directory traversal in the Importers Plugin which permits remote attackers to create arbitrary files...