Known vulnerabilities in Jira Software Server - page 6

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Total vulnerabilities: 203
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Software Server Jira Software Server is affected by 203 known vulnerabilities: 1 critical, 16 high, 108 medium, 78 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34156 - Exposure of sensitive information to an unauthorized actor
CVE-2019-20898
CWE-200 Medium
No
No
8.8.0 13.07.2020 SB2020062322
#VU30149 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-14172
CWE-74 High
No
No
8.8.1 03.07.2020 SB2020060116
#VU30150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-14173
CWE-79 Low
No
No
8.7.1 03.07.2020 SB2020070328
#VU34175 - Improper input validation
CVE-2019-20418
CWE-20 Medium
No
No
8.8.0 03.07.2020 SB2020062322
#VU30151 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-20417
CWE-601 Low
No
No
8.6.1 02.07.2020 SB2020070227
#VU34184 - Improper input validation
CVE-2020-14167
CWE-20 Medium
No
No
8.9.1 01.07.2020 SB2020062323
#VU30152 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14168
CWE-200 Medium
No
No
8.9.1 01.07.2020 SB2020070132
#VU30153 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-14169
CWE-79 Low
No
No
8.9.1 01.07.2020 SB2020070132
#VU30154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4022
CWE-79 Low
No
No
8.9.1 01.07.2020 SB2020070132
#VU30155 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4024
CWE-79 Low
No
No
8.9.1 01.07.2020 SB2020070132
#VU30156 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4025
CWE-79 Low
No
No
8.9.1 01.07.2020 SB2020070132
#VU34189 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20416
CWE-79 Low
No
No
8.3.0 30.06.2020 SB2020063031
#VU30158 - Cross-Site Request Forgery (CSRF)
CVE-2019-20415
CWE-352 Medium
No
No
8.1.0 30.06.2020 SB2020063029
#VU30160 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20414
CWE-79 Low
No
No
8.4.2 29.06.2020 SB2020062914
#VU30161 - Exposure of sensitive information to an unauthorized actor
CVE-2019-20410
CWE-200 Medium
No
No
8.4.2 29.06.2020 SB2020062914
#VU30162 - Cross-Site Request Forgery (CSRF)
CVE-2019-20411
CWE-352 Medium
No
No
8.4.2 29.06.2020 SB2020062914
#VU30163 - Improper Authentication
CVE-2019-20412
CWE-287 Medium
No
No
8.4.2 29.06.2020 SB2020062914
#VU30164 - Improper input validation
CVE-2019-20413
CWE-20 Medium
No
No
8.4.2 29.06.2020 SB2020062914
#VU34201 - Improper input validation
CVE-2020-4028
CWE-20 Medium
No
No
8.9.1 23.06.2020 SB2020062323
#VU34202 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-20409
CWE-74 High
No
No
8.8.0 23.06.2020 SB2020062322


Showing elements 101 - 120 out of 203