Jira Server@8.5.0 Security Vulnerabilities and Issues — Jira Server@8.5.0 CVE List

Lucene search

AtlassianJira Server8.5.0

3 matches found

CVE•added 2019/12/18 4:15 a.m.•114 views

CVE-2019-15013

The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project ...

4.3CVSS4.4AI score0.00287EPSS

CVE•added 2020/07/01 2:15 a.m.•70 views

CVE-2020-14168

The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.

5.9CVSS5.5AI score0.00387EPSS

CVE•added 2020/07/01 2:15 a.m.•64 views

CVE-2020-14167

The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impact the application's availability via an Denial of Service (DoS) vulnerability.

7.5CVSS7.4AI score0.00915EPSS