atlassian Vulnerability Advisory Catalog

Total 464 security vulnerabilities recorded for atlassian software and firmware.

← Back to All Vendors
Component: jira_software_data_center

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Sc...

📅 2021-11-01
CVSS 6.1 Dossier →
Component: jira_data_center

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via a...

📅 2021-11-01
CVSS 4.3 Dossier →
Component: jira

Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication set...

📅 2021-10-26
CVSS 6.5 Dossier →
Component: jira

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private fi...

📅 2021-10-26
CVSS 7.5 Dossier →
Component: jira

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure D...

📅 2021-10-26
CVSS 7.5 Dossier →
Component: jira

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of private projects and filters via an I...

📅 2021-10-26
CVSS 7.5 Dossier →
Component: data_center

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Sc...

📅 2021-10-26
CVSS 6.1 Dossier →
Component: jira

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL endpoint via a Broken Access Co...

📅 2021-10-21
CVSS 5.3 Dossier →
Component: jira_data_center

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery (CSRF) ...

📅 2021-10-21
CVSS 6.5 Dossier →
CVE-2020-18685 CRITICAL
Component: floodlight

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP ...

📅 2021-09-30
CVSS 9.8 Dossier →
CVE-2020-18684 CRITICAL
Component: floodlight

Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number....

📅 2021-09-30
CVSS 9.8 Dossier →
CVE-2020-18683 CRITICAL
Component: floodlight

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling....

📅 2021-09-30
CVSS 9.8 Dossier →
Component: jira_data_center

Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers with JIRA Administrators acce...

📅 2021-09-16
CVSS 7.2 Dossier →
Component: data_center

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users via an enumeration vuln...

📅 2021-09-14
CVSS 5.3 Dossier →
Component: data_center

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who...

📅 2021-09-14
CVSS 4.3 Dossier →
Component: data_center

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denia...

📅 2021-09-14
CVSS 7.5 Dossier →
Component: data_center

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an enumeration...

📅 2021-09-14
CVSS 5.3 Dossier →
Component: data_center

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulner...

📅 2021-09-14
CVSS 5.3 Dossier →
Component: data_center

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulner...

📅 2021-09-08
CVSS 5.3 Dossier →
Component: data_center

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an ...

📅 2021-09-08
CVSS 4.3 Dossier →
Component: jira_data_center

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (Do...

📅 2021-09-08
CVSS 5.5 Dossier →
Component: data_center

Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after...

📅 2021-09-01
CVSS 5.3 Dossier →
Component: jira_service_desk

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbi...

📅 2021-09-01
CVSS 7.2 Dossier →
Component: atlasboard

The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vul...

📅 2021-09-01
CVSS 7.5 Dossier →
Page 5 of 20 (464 Total Records)