CVE-2019-20900: Improper Neutralization of Input During Web Page Generation

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the Add Field module. The affected versions are before version 8.7.0...

CVE-2019-20898: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0...

CVE-2019-20897: Unrestricted Upload of File with Dangerous Type

The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7.0 before 8.7.1...

Atlassian JIRA Server and Data Center Denial of Service Vulnerability (CNVD-2020-41865)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

PT-2020-13913

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.13.6 Atlassian Jira Server and Data Center versions 8.0.0 through 8.5.7 Atlassian Jira Server and Data Center versions 8.6.0 through 8.9.2 Atlassian Jira Server and Data Center versions...

CVE-2020-14174: Authorization Bypass Through User-Controlled Key

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References IDOR vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from version 8.0.0 before...

PT-2020-10861

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.8.0 Description The issue allows remote attackers to access sensitive information without being authenticated in the Global permissions screen. Recommendations For versions prior to...

Atlassian Jira Server and Data Center Denial of Service Vulnerability

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

CVE-2019-20899: Undefined Security Weakness

The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unresponsive via repeated requests to a certain endpoint in the Gadget API. The affected versions are before version 8.5.4, and from version 8.6.0 before 8.6.1...

PT-2020-10863

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.7.0 Description The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the Add Field module. Recommendations For versio...

CVE-2019-20419

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. The affected versions are before version 8.5.5, and from version 8.6.0 before 8.7.2...

CVE-2020-14173

The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7....

CVE-2020-14172

This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implemented. The way in which velocity templates were used in Atlassian Jira Server and Data Center in affected versions allowed remote attackers to achieve remote...

CVE-2019-20418: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Application Denial of Service vulnerability in the /rendering/wiki endpoint. The affected versions are before version 8.8.0...

PT-2020-13912

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.5.4 Atlassian Jira Server and Data Center versions 8.6.0 through 8.6.1 Atlassian Jira Server and Data Center versions 8.7.0 Description The file upload feature in Atlassian Jira Server...

Atlassian JIRA Server and Atlassian JIRA Data Center Cross-Site Scripting Vulnerabilities

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

Atlassian JIRA Server and Data Center Injection Vulnerabilities

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

PT-2020-10435

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.8.0 Description The issue allows remote attackers to prevent users from accessing the instance via an Application Denial of Service in the "/rendering/wiki" endpoint. Recommendations Fo...

PT-2020-10436

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.5.5 Atlassian Jira Server and Data Center versions 8.6.0 through 8.7.2 Description The issue allows remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomca...

CVE-2020-14173: Improper Neutralization of Input During Web Page Generation

The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7....