Known vulnerabilities in Jira Software Server 4.2.2-b589

Vendor: Atlassian
Version: 4.2.2-b589
Software CPE: cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Jira Software Server version 4.2.2-b589 Jira Software Server 4.2.2-b589 is affected by 19 vulnerabilities: 6 medium, 13 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21187 - Improper Authorization
CVE-2018-20826
CWE-285 Low
No
No
7.12.3, 7.13.0, 8.0.0 18.09.2019 SB2019080916
#VU21186 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-11589
CWE-601 Medium
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21185 - Cross-Site Request Forgery (CSRF)
CVE-2019-11588
CWE-352 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21184 - Cross-Site Request Forgery (CSRF)
CVE-2019-11587
CWE-352 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21183 - Cross-Site Request Forgery (CSRF)
CVE-2019-11586
CWE-352 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21182 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-11585
CWE-601 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21181 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11584
CWE-79 Low
No
No
8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21180 - Exposure of sensitive information to an unauthorized actor
CVE-2019-8448
CWE-200 Medium
No
No
7.13.4, 8.2.2 18.09.2019 SB2019081347
#VU21179 - Cross-Site Request Forgery (CSRF)
CVE-2019-8447
CWE-352 Low
No
No
8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21178 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8450
CWE-79 Low
No
No
7.13.6, 8.4.0 18.09.2019 SB2019091807
#VU21176 - Exposure of sensitive information to an unauthorized actor
CVE-2019-8449
CWE-200 Medium
Public exploit available
No
8.4.0 18.09.2019 SB2019091807
#VU21169 - Server-Side Request Forgery (SSRF)
CVE-2019-8451
CWE-918 Medium
No
No
8.4.0 17.09.2019 SB2019091807
#VU21166 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14997
CWE-200 Low
No
No
8.4.0 17.09.2019 SB2019091807
#VU21165 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14996
CWE-79 Low
No
No
7.13.9, 8.3.3, 8.4.0 17.09.2019 SB2019091807
#VU21154 - Missing Authorization
CVE-2019-14995
CWE-862 Medium
No
No
8.4.0 17.09.2019 SB2019091807
#VU21151 - Missing Authorization
CVE-2019-8445
CWE-862 Low
No
No
7.13.9, 8.3.2, 8.4.0 17.09.2019 SB2019091807
#VU21150 - Missing Authorization
CVE-2019-8446
CWE-862 Medium
No
No
8.3.2, 8.4.0, 8.5.0 17.09.2019 SB2019091807
#VU21146 - Cross-Site Request Forgery (CSRF)
CVE-2019-14998
CWE-352 Low
No
No
8.4.0, 8.5.0 17.09.2019 SB2019091807
#VU21143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8444
CWE-79 Low
No
No
7.13.6, 8.3.2, 8.4.0 17.09.2019 SB2019091807