PT-2020-17839

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.5.5 Atlassian Jira Server and Data Center versions 8.6.0 through 8.8.1 Atlassian Jira Server and Data Center versions 8.9.0 Description The issue allows remote attackers to inject...

PT-2020-13906

Name of the Vulnerable Software and Affected Versions Jira Server and Data Center versions prior to 7.13.4 Jira Server and Data Center versions 8.5.0 through 8.5.4 Jira Server and Data Center versions 8.8.0 through 8.8.1 Jira Server and Data Center versions 8.9.0 through 8.9.0 Description The iss...

PT-2020-17836

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.5.5 Atlassian Jira Server and Data Center versions 8.6.0 through 8.8.1 Atlassian Jira Server and Data Center versions 8.9.0 Description The issue allows remote attackers to inject...

CVE-2020-4025: Improper Neutralization of Input During Web Page Generation

The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Sit...

PT-2020-13908

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.9.1 Description The issue concerns a Cross-Site Scripting XSS vulnerability in the quick search component, allowing remote attackers to inject arbitrary HTML or JavaScript...

PT-2020-13904

Name of the Vulnerable Software and Affected Versions Jira Server and Data Center versions prior to 8.9.0 Description The issue allows remote attackers to obtain information about custom project avatars names via an improper authorization. Recommendations For versions prior to 8.9.0, update to...

CVE-2019-20416

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the project configuration feature. The affected versions are before version 8.3.0...

Atlassian JIRA Server and Data Center Authorization Issues Vulnerability (CNVD-2021-17354)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

PT-2020-10432

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.13.3 Atlassian Jira Server and Data Center versions 8.0.0 through 8.0.x before 8.1.0 Description The issue allows remote attackers to modify logging and profiling settings via a...

CVE-2019-20416: Improper Neutralization of Input During Web Page Generation

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the project configuration feature. The affected versions are before version 8.3.0...

Atlassian JIRA Server and Data Center Information Disclosure Vulnerability (CNVD-2021-17352)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

PT-2020-10433

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.3.0 Description The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the project configuration feature. Recommendatio...

CVE-2019-20415: Cross-Site Request Forgery (CSRF)

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0...

PT-2020-10427

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.6.17 Atlassian Jira Server and Data Center versions 7.7.0 through 7.13.8 Atlassian Jira Server and Data Center versions 8.0.0 through 8.4.1 Description The issue allows remote attackers...

CVE-2019-20411: Cross-Site Request Forgery (CSRF)

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...

CVE-2019-20410: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...

PT-2020-10428

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.13.9 Atlassian Jira Server and Data Center versions 8.0.0 through 8.4.2 Description The issue allows remote attackers to modify Wallboard settings via a Cross-site request forgery CSRF...

CVE-2019-20413: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...

PT-2020-10429

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.13.9 Atlassian Jira Server and Data Center versions 8.0.0 through 8.4.2 Description The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allo...

CVE-2019-20412: Improper Authentication

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...