5013 matches found
CVE-2019-20414
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in Issue Navigator Basic Search. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
Cross site scripting
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in Issue Navigator Basic Search. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
CVE-2019-20414
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in Issue Navigator Basic Search. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
CVE-2019-20414
CVE-2019-20414 affects Atlassian Jira Server and Jira Data Center. The vulnerability is a Cross-Site Scripting (XSS) in the Issue Navigator Basic Search, exploitable via crafted input. Affected versions are Jira Server/Data Center before 7.13.9 and 8.0.0 up to (but not including) 8.4.2. The issue...
CVE-2019-20412
The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...
CVE-2019-20411
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
CVE-2019-20410
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...
CVE-2019-20413
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
Authentication flaw
The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...
Cross site request forgery (csrf)
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
Denial of service
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
Information disclosure
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...
CVE-2019-20413
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
CVE-2019-20413
Atlassian Jira Server/Data Center is affected by CVE-2019-20413 due to a Denial of Service vulnerability in the UserPickerBrowser.jspa page caused by missing input validation. Affected versions are before 7.13.9 and 8.0.0 to 8.4.2 (inclusive lower than 8.4.2); fixed in 7.13.9, 8.4.2, and 8.5.0. N...
CVE-2019-20412
The CVE-2019-20412 vulnerability affects Atlassian Jira Server/Data Center on Convert Sub-Task to Issue page. Root cause is an Improper Authentication flaw that lets remote attackers enumerate workflow names, the project key (if part of a workflow name), issue keys, issue types, and status types....
CVE-2019-20412
The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...
CVE-2019-20411
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
CVE-2019-20411
The CVE-2019-20411 issue affects Atlassian Jira Server/Data Center wallboard settings via a Cross-Site Request Forgery (CSRF) flaw. Affected products/versions: Jira Server/Data Center prior to 7.13.9 and Jira 8.0.0 prior to 8.4.2. Root cause: CSRF on the Wallboard endpoint that enables remote mod...
CVE-2019-20410
CVE-2019-20410 affects Atlassian Jira Server/Data Center via an Information Disclosure vulnerability in the comment restriction feature. Affected versions are before 7.6.17, 7.7.0–7.13.9, and 8.0.0–8.4.2. Remote attackers could view sensitive information; no exploitation details are provided in t...
CVE-2019-20410
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...