CVE-2020-36236

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the ViewWorkflowSchemes.jspa and ListWorkflows.jspa endpoints. The affected versions are before version 8.5.11, from version 8.6...

CVE-2020-36234

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the Screens Modal view. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14...

CVE-2020-36237

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0...

Cross site scripting

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the ViewWorkflowSchemes.jspa and ListWorkflows.jspa endpoints. The affected versions are before version 8.5.11, from version 8.6...

Information disclosure

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0...

CVE-2020-36234

CVE-2020-36234: Atlassian Jira Server/Data Center XSS in Screens Modal view affects Jira versions prior to 8.5.11, 8.6.x before 8.13.3, and 8.14.x before 8.15.0. Root cause is insufficient input validation in the Screens Modal UI, enabling remote attackers to inject arbitrary HTML/JavaScript. Imp...

CVE-2020-36237

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0...

CVE-2020-36237

CVE-2020-36237 affects Atlassian Jira Server and Data Center prior to 8.15.0, where unauthenticated remote attackers can view custom field options via the /rest/api/2/customFieldOption/ endpoint (information disclosure). Affected versions are before 8.15.0; fixed in 8.15.0. The connected Atlassia...

CVE-2020-36236

CVE-2020-36236 affects Atlassian Jira Server/Data Center. The connected documents confirm a Cross-Site Scripting (XSS) vulnerability in the ViewWorkflowSchemes.jspa and ListWorkflows.jspa endpoints. Affected versions are before 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0. The ...

CVE-2020-36235

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field and custom SLA names via an Information Disclosure vulnerability in the mobile site view. The affected versions are before version 8.13.2, and from version 8.14.0 before 8.14.1...

CVE-2020-36235

Vulnerability: Atlassian Jira Server/Data Center information disclosure via the mobile site view. Affected: before 8.13.2, and 8.14.0 before 8.14.1. Impact: unauthenticated remote attackers can view custom field and custom SLA names. Root cause: information disclosure in the mobile site view (spe...

Atlassian Jira Server 和 Data Center 跨站脚本漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site scripting vulnerability exists in Atlassian Jira Server and Data Center, which stems from a lack of proper validati...

Atlassian Jira Server 和 Data Center 跨站脚本漏洞

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is a server version of a defect tracking management system. Atlassian JIRA Data Center is the data center version of Atlassian JIRA. validation, an attacker could exploit the...

Atlassian Jira和Atlassian JIRA Data Center 信息泄露漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

Atlassian Jira Server 和 Data Center 信息泄露漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

Atlassian Jira Server 和 Data Center 信息泄露漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

The vulnerability of the REST API implementation of the network management system’s data center management module allows a attacker to execute arbitrary SQL commands.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

The vulnerability of the logging subsystem of the Cisco Data Center Network Manager, a system for managing network operations at data centers, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the logging subsystem of the Cisco Data Center Network Manager DCNM is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco Data Center Network Manager DCNM management interface relates to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the REST API implementation of the network management system’s data center management module allows a attacker to execute arbitrary SQL commands.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...