Atlassian Jira 8.6.0 < 8.6.1 Dos Through Gadget API

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 8.5.4 or 8.6.0 prior to 8.6.1. It is, therefore, affected by a vulnerability which permits remote attackers to make Jira unresponsive via repeated requests to a certai...

Atlassian Jira < 9.6.0 (JRASERVER-74776) (deprecated)

Atlassian has determined this vulnerability cannot be exploited, and does not impact Jira because it does not use the affected methods from Spring Framework. No action is needed by users to mitigate the threat. %NASLMINLEVEL 80900 C Tenable, Inc. @DEPRECATED@ Disabled on 2023/04/06. Advisory...

Atlassian 8.6.x < 8.6.1 Open Redirect In Login.jsp

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 7.13.0 prior to 8.5.2 or 8.6.x 8.6.1. It is, therefore, affected by a vulnerability that permits remote attackers to redirect users to a different website which they may use as part of...

Atlassian Jira < 8.13.12 Indirect Direct Object Reference In Status Gadget

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.20.0. It is, therefore, affected by a vulnerability which allows anonymous remote attackers to view the names of private projects and filters via an Insecure Direct Object...

Atlassian Jira < 3.13.2 WebWork 1 Parameter Injection Hole

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 3.13.2. It is, therefore, affected by a vulnerability which allows remote attackers to call exposed public methods via a webwork1 parameter injection. Note that the scanner ha...

Atlassian Jira 8.18.0 < 8.18.1 Reverse Tabnapping Via Project Shortcuts

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.15, 8.6.x 8.13.7, 8.14.0 8.17.1 or 8.18.0 8.18.1. It is, therefore, affected by a vulnerability in the Project Shortcuts feature which allows remote attackers to redirect...

Atlassian Jira 8.6.x < 8.13.7 Reverse Tabnapping Via Project Shortcuts

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.15, 8.6.x 8.13.7, 8.14.0 8.17.1 or 8.18.0 8.18.1. It is, therefore, affected by a vulnerability in the Project Shortcuts feature which allows remote attackers to redirect...

Atlassian Jira 8.14.0 < 8.17.1 Reverse Tabnapping Via Project Shortcuts

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.15, 8.6.x 8.13.7, 8.14.0 8.17.1 or 8.18.0 8.18.1. It is, therefore, affected by a vulnerability in the Project Shortcuts feature which allows remote attackers to redirect...

Atlassian Jira < 8.5.15 Reverse Tabnapping Via Project Shortcuts

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.15, 8.6.x 8.13.7, 8.14.0 8.17.1 or 8.18.0 8.18.1. It is, therefore, affected by a vulnerability in the Project Shortcuts feature which allows remote attackers to redirect...

Atlassian Jira < 8.9.0 Improper Authorization In Project Administration

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.9.0. It is, therefore, affected by a vulnerability which permits remote attackers to obtain information about custom project avatars via an improper authorization...

Atlassian Jira < 9.6.0 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 9.6.0. It is, therefore, affected by multiple vulnerabilities: - A issue in the underlying Spring framework which permits a authenticated attacker to perform a STOMP over...

Atlassian Confluence 7.13.9 < 7.13.12 Embedded Spring-Beans Denial Of Service

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.13.9 prior to 7.13.12, 7.19.0 prior to 7.19.3. It is, therefore, affected by a Denial of Service DoS attack vulnerability when relying on attacker controlled data binding to set a...

Atlassian Jira < 3.13.1 Cross-Site Scripting

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 3.13.1. It is, therefore, affected by a Cross-Site Scripting XSS vulnerability in the ViewProfile page fullname field. Note that the scanner has not tested for these issues bu...

Atlassian Confluence < 7.13.14 / 7.14.x < 7.19.6 / 7.20.x < 8.1.0 (CONFSERVER-82436)

The version of Atlassian Confluence installed on the remote host is affected by an information disclosure vulnerability in the Synchrony service. An unauthenticated, remote attacker can exploit this to view sensitive information. Note that Nessus has not tested for this issue but has instead reli...

Atlassian Confluence < 7.4.10 DLL Hijacking

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.10 or 7.5.0 prior to 7.12.3. It therefore may be affected by a weakness when deployed onto the Windows operating system environment allows allow authenticated local...

Atlassian Jira 8.6.x < 8.13.6 XML Export Cross-Site Scripting

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.12 or 8.14.x prior to 8.17.0. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripti...

Atlassian Jira < 8.5.9 WYSIWYG Editor Cross-Site Scripting

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.9 or 8.6.x prior to 8.8.2. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting X...

Atlassian Jira 8.6.x < 8.8.2 WYSIWYG Editor Cross-Site Scripting

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.9 or 8.6.x prior to 8.8.2. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting X...

Atlassian Jira 8.6.x < 8.13.1 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.10 or 8.6.x 8.13.1. It is, therefore, affected by multiple vulnerabilities: - A vulnerability which allows anonymous remote attackers to the query component JQL endpoint v...

Atlassian Jira < 7.13.0 Template Insecure Deserialization

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.0, 8.0.x prior to 8.5.0 or 8.6.x prior to 8.8.1. It is, therefore, affected by a vulnerability that permits remote attackers remote attackers to achieve remote code...