Known vulnerabilities in Jira Software Server 8.0.0-m0030 - page 3

Vendor: Atlassian
Version: 8.0.0-m0030
Software CPE: cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Total vulnerabilities: 51
Public exploits: 6
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Jira Software Server version 8.0.0-m0030 Jira Software Server 8.0.0-m0030 is affected by 51 vulnerabilities: 4 high, 25 medium, 22 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21186 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-11589
CWE-601 Medium
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21185 - Cross-Site Request Forgery (CSRF)
CVE-2019-11588
CWE-352 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21184 - Cross-Site Request Forgery (CSRF)
CVE-2019-11587
CWE-352 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21183 - Cross-Site Request Forgery (CSRF)
CVE-2019-11586
CWE-352 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21182 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-11585
CWE-601 Low
No
No
7.13.6, 8.2.3, 8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21181 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11584
CWE-79 Low
No
No
8.3.2, 8.4.0 18.09.2019 SB2019091807
#VU21180 - Exposure of sensitive information to an unauthorized actor
CVE-2019-8448
CWE-200 Medium
No
No
7.13.4, 8.2.2 18.09.2019 SB2019081347
#VU19304 - Exposure of sensitive information to an unauthorized actor
CVE-2019-3403
CWE-200 Low
Public exploit available
No
7.13.3, 8.1.1 22.07.2019 SB2019052215
#VU19301 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-11581
CWE-94 High
No
Exploited
7.6.14, 7.13.5, 8.0.3, 8.1.2, 8.2.3, 8.3.0 22.07.2019 SB2019072207
#VU18401 - Improper Access Control
CVE-2019-3399
CWE-284 Medium
No
No
7.13.2, 8.0.2, 8.1.0 06.05.2019 SB2019050604
#VU18395 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-3400
CWE-79 Low
No
No
7.13.2, 8.0.2, 8.1.0 06.05.2019 SB2019050604


Showing elements 41 - 60 out of 51