Atlassian Jira 8.5.x < 8.19.1 (JRASERVER-72801)

The version of Atlassian Jira installed on the remote host is prior to 8.5.x 8.19.1. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72801 advisory. - Access-revoked user can enable/disable Issue Collectors on a Jira project - CVE-2021-41312 CVE-2021-41312 Note that...

Atlassian Jira < 8.13.15 / 8.14.x < 8.20.3 / 8.21.0 XSS (JRASERVER-73068)

The version of Atlassian Jira installed on the remote host is prior to 8.13.15 / 8.14.x 8.20.3 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73068 advisory. - Reflected XSS via /rest/collectors/1.0/template/custom - CVE-2021-43942 CVE-2021-43942 Note that...

Atlassian Jira < 8.13.12 / 8.14.x < 8.20.2 / 8.21.0 XSS (JRASERVER-72939)

The version of Atlassian Jira installed on the remote host is prior to 8.13.12 / 8.14.x 8.20.2 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72939 advisory. - Reflected XSS /secure/admin/ImporterFinishedPage.jspa via error message - CVE-2021-41304...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Atlassian Confluence OGNL Injection POC Vulnerability CVE-202...

Atlassian Jira 8.0.x < 8.13.22 / 8.20.x < 8.20.10 / 8.22.x < 8.22.4 (JRASERVER-73863)

The version of Atlassian Jira installed on the remote host is prior to 8.0.x 8.13.22 / 8.20.x 8.20.10 / 8.22.x 8.22.4. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73863 advisory. - Full Read SSRF in Mobile Plugin CVE-2022-26135 CVE-2022-26135 Note that Nessus has...

Atlassian Jira < 8.13.14 / 8.14.x < 8.19.0 (JRASERVER-72738)

The version of Atlassian Jira installed on the remote host is prior to 8.13.14 / 8.14.x 8.19.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72738 advisory. - Denial of Service when reading particularly-crafted GIF files - CVE-2021-39116 CVE-2021-39116 Note that...

Atlassian Jira 8.15.x < 8.16.0 XSRF (JRASERVER-72761)

The version of Atlassian Jira installed on the remote host is prior to 8.15.x 8.16.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72761 advisory. - Replay attack via the CSRF failure retry form - CVE-2021-39124 CVE-2021-39124 Note that Nessus has not tested for th...

Atlassian Jira < 8.20.3 / 8.21.0 XSS (JRASERVER-73069)

The version of Atlassian Jira installed on the remote host is prior to 8.20.3 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73069 advisory. - Stored XSS on /rest/jpo/1.0/hierarchyConfiguration via issueTypes parameter - CVE-2021-43945 CVE-2021-43945 Note...

Atlassian Jira < 8.13.25 / 8.14.0 < 8.20.12 / 8.22.0 (JRASERVER-73593)

The version of Atlassian Jira Server running on the remote host is affected by a vulnerability as referenced in the JRASERVER-73593 advisory. - Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers without permission to view a private project to view the...

Atlassian Jira < 8.13.15 / 8.14.x < 8.20.3 / 8.21.0 XSRF (JRASERVER-73073)

The version of Atlassian Jira installed on the remote host is prior to 8.13.15 / 8.14.x 8.20.3 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73073 advisory. - jira-importers-plugin has misconfigured XSRF protection - CVE-2021-43941 CVE-2021-43941 Note that...

Atlassian Jira < 8.13.18 / 8.14.x < 8.20.6 / 8.21.x < 8.22.0 (JRASERVER-73594)

The version of Atlassian Jira installed on the remote host is prior to 8.13.18 / 8.14.x 8.20.6 / 8.21.x 8.22.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73594 advisory. - Affected versions of Atlassian Jira Server and Data Center allow attackers with...

Atlassian Jira < 8.6.0 / 8.7.x < 8.13.12 / 8.14.x < 8.20.1 / 8.21.0 (JRASERVER-72940)

The version of Atlassian Jira installed on the remote host is prior to 8.6.0 / 8.7.x 8.13.12 / 8.14.x 8.20.1 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72940 advisory. - Non-administrators can edit the File Replication settings - CVE-2021-41308...

Atlassian Jira 8.17.x < 8.18.0 (JRASERVER-72669)

The version of Atlassian Jira installed on the remote host is prior to 8.17.x 8.18.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72669 advisory. - Vulnerable version of XStream used in Jira Server and Data Center - CVE-2021-29505 CVE-2021-29505 Note that Nessus h...

Atlassian Jira 8.5.x < 8.20.1 / 8.21.0 (JRASERVER-72898)

The version of Atlassian Jira installed on the remote host is prior to 8.5.x 8.20.1 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72898 advisory. - Privilege escalation leads unauthorized user to edit email batch configurations - CVE-2021-41313...

Atlassian Jira 8.5.x < 8.18.0 (JRASERVER-72575)

The version of Atlassian Jira installed on the remote host is prior to 8.5.x 8.18.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72575 advisory. - Information disclosure issue in the comment notification feature - CVE-2021-39120 CVE-2021-39120 Note that Nessus has...

Atlassian Jira < 8.5.10 / 8.6.x < 8.13.1 XSRF (JRASERVER-71806)

The version of Atlassian Jira installed on the remote host is prior to 8.5.10 / 8.6.x 8.13.1. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-71806 advisory. - CSRF token theft through referrer headers - CVE-2021-39126 CVE-2021-39126 Note that Nessus has not tested fo...

Atlassian Jira 8.5.x < 8.19.1 (JRASERVER-72802)

The version of Atlassian Jira installed on the remote host is prior to 8.5.x 8.19.1. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72802 advisory. - Access-revoked user can add new users and groups to a Jira project - CVE-2021-41311 CVE-2021-41311 Note that Nessus h...

Atlassian Jira < 8.5.14 / 8.6.x < 8.13.6 / 8.14.x < 8.16.1 / 8.17.0 (JRASERVER-72695)

The version of Atlassian Jira installed on the remote host is prior to 8.5.14 / 8.6.x 8.13.6 / 8.14.x 8.16.1 / 8.17.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72695 advisory. - Limited Remote File Read in Jira Software Server - CVE-2021-26086 CVE-2021-26086 No...

Atlassian Jira < 8.13.18 / 8.14.x < 8.20.6 / 8.21.x < 8.22.0 (JRASERVER-73595)

The version of Atlassian Jira installed on the remote host is prior to 8.13.18 / 8.14.x 8.20.6 / 8.21.x 8.22.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73595 advisory. - Affected versions of Atlassian Jira Server and Data Center allow remote attackers with...

Atlassian Jira 7.2.x < 8.18.1 / 8.19.0 (JRASERVER-72660)

The version of Atlassian Jira installed on the remote host is prior to 7.2.x 8.18.1 / 8.19.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72660 advisory. - Remote code execution in workflow import - CVE-2017-18113 CVE-2017-18113 Note that Nessus has not tested for...