Known vulnerabilities in Jira Software Server - page 10

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Total vulnerabilities: 203
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Software Server Jira Software Server is affected by 203 known vulnerabilities: 1 critical, 16 high, 108 medium, 78 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12877 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18098
CWE-79 Low
No
No
- 21.05.2018 SB2017121809
#VU12770 - Cross-Site Request Forgery (CSRF)
CVE-2017-16862
CWE-352 Low
No
No
- 16.05.2018 SB2017121809
#VU12608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18100
CWE-79 Low
No
No
- 14.05.2018 SB2017121809
#VU12442 - Permissions, Privileges, and Access Controls
CVE-2017-18101
CWE-264 Low
No
No
- 08.05.2018 SB2017121809
#VU12440 - Cross-Site Request Forgery (CSRF)
CVE-2017-18033
CWE-352 Low
No
No
- 08.05.2018 SB2017121809
#VU12439 - Server-Side Request Forgery (SSRF)
CVE-2017-16865
CWE-918 Low
No
No
- 08.05.2018 SB2017121809
#VU12598 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14594
CWE-79 Low
No
No
- 07.05.2018 SB2017121809
#VU12444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-16864
CWE-79 Low
No
No
- 07.05.2018 SB2017121809
#VU12738 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18039
CWE-79 Low
No
No
- 07.05.2018 SB2017121809
#VU39218 - Deserialization of Untrusted Data
CVE-2017-5983
CWE-502 High
No
No
- 10.04.2017 SB2017041013
#VU3059 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-1164
CWE-79 Low
No
No
- 02.01.2017 SB2010041601
#VU3058 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-1164
CWE-79 Low
No
No
- 02.01.2017 SB2010041601
#VU3057 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-1164
CWE-79 Low
No
No
- 02.01.2017 SB2010041601
#VU3056 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-1164
CWE-79 High
No
No
- 02.01.2017 SB2010041601
#VU3055 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-1164
CWE-79 Medium
No
No
- 02.01.2017 SB2010041601
#VU3054 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-1164
CWE-79 Medium
No
No
- 02.01.2017 SB2010041601
#VU3053 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-1164
CWE-79 Medium
No
No
- 02.01.2017 SB2010041601
#VU3052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-1164
CWE-79 Medium
No
No
- 02.01.2017 SB2010041601
#VU3051 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-1164
CWE-79 Medium
No
No
- 02.01.2017 SB2010041601
#VU42652 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5319
CWE-79 Low
No
No
- 20.08.2013 SB2013082003


Showing elements 181 - 200 out of 203