Known vulnerabilities in Jira Software Server 8.0.0-m0025 - page 2

Vendor: Atlassian
Version: 8.0.0-m0025
Software CPE: cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Total vulnerabilities: 51
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Jira Software Server version 8.0.0-m0025 Jira Software Server 8.0.0-m0025 is affected by 51 vulnerabilities: 4 high, 25 medium, 22 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34156 - Exposure of sensitive information to an unauthorized actor
CVE-2019-20898
CWE-200 Medium
No
No
8.8.0 13.07.2020 SB2020062322
#VU34157 - Improper input validation
CVE-2019-20899
CWE-20 Medium
No
No
8.7.0 13.07.2020 SB2020031721
#VU34175 - Improper input validation
CVE-2019-20418
CWE-20 Medium
No
No
8.8.0 03.07.2020 SB2020062322
#VU34185 - Server-Side Request Forgery (SSRF)
CVE-2019-20408
CWE-918 Medium
No
No
8.7.0 01.07.2020 SB2020031721
#VU30160 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20414
CWE-79 Low
No
No
8.4.2 29.06.2020 SB2020062914
#VU34202 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-20409
CWE-74 High
No
No
8.8.0 23.06.2020 SB2020062322
#VU34730 - Missing Authorization
CVE-2019-20407
CWE-862 Low
No
No
8.7.0 17.03.2020 SB2020031721
#VU30378 - Incorrect Default Permissions
CVE-2019-20106
CWE-276 Low
No
No
8.5.4 06.02.2020 SB2020020625
#VU30382 - Cross-Site Request Forgery (CSRF)
CVE-2019-20405
CWE-352 Medium
No
No
8.6.0 06.02.2020 SB2020020626
#VU21186 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-11589
CWE-601 Medium
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21185 - Cross-Site Request Forgery (CSRF)
CVE-2019-11588
CWE-352 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21184 - Cross-Site Request Forgery (CSRF)
CVE-2019-11587
CWE-352 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21183 - Cross-Site Request Forgery (CSRF)
CVE-2019-11586
CWE-352 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21182 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-11585
CWE-601 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21181 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11584
CWE-79 Low
No
No
8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21179 - Cross-Site Request Forgery (CSRF)
CVE-2019-8447
CWE-352 Low
No
No
8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21178 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8450
CWE-79 Low
No
No
7.13.6, 8.4.0 18.09.2019 SB2019091807
#VU21176 - Exposure of sensitive information to an unauthorized actor
CVE-2019-8449
CWE-200 Medium
Public exploit available
No
8.4.0 18.09.2019 SB2019091807
#VU21169 - Server-Side Request Forgery (SSRF)
CVE-2019-8451
CWE-918 Medium
No
No
8.4.0 17.09.2019 SB2019091807
#VU21151 - Missing Authorization
CVE-2019-8445
CWE-862 Low
No
No
7.13.9, 8.3.2, 8.4.0 17.09.2019 SB2019091807


Showing elements 21 - 40 out of 51