Known vulnerabilities in Jira Software Server - page 9

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Total vulnerabilities: 203
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Software Server Jira Software Server is affected by 203 known vulnerabilities: 1 critical, 16 high, 108 medium, 78 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21324 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20827
CWE-79 Low
No
No
7.13.1, 8.0.0 25.09.2019 SB2019050605
#VU18402 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13395
CWE-79 Medium
No
No
7.6.8, 7.7.5, 7.8.5, 7.9.3, 7.10.3, 7.11.1 06.05.2019 SB2018082818
#VU18401 - Improper Access Control
CVE-2019-3399
CWE-284 Medium
No
No
7.13.2, 8.0.2, 8.1.0 06.05.2019 SB2019050604
#VU18396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20824
CWE-79 Low
No
No
7.13.1, 8.0.0 06.05.2019 SB2019050605
#VU18395 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-3400
CWE-79 Low
No
No
7.13.2, 8.0.2, 8.1.0 06.05.2019 SB2019050604
#VU17755 - Server-Side Request Forgery (SSRF)
CVE-2018-13404
CWE-918 Low
No
No
7.6.10, 7.12.4, 7.13.1, 8.0.0 18.02.2019 SB2019020719
#VU17754 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13403
CWE-79 Low
No
No
7.6.10, 7.12.4, 7.13.1, 8.0.0 18.02.2019 SB2019020719
#VU17753 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20232
CWE-79 Low
No
No
7.6.11, 7.13.1 18.02.2019 SB2019020719
#VU15739 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-13402
CWE-601 Low
No
No
7.6.9, 7.7.5, 7.8.5, 7.9.3, 7.10.3, 7.11.3, 7.12.3, 7.13.1 06.11.2018 SB2018110609
#VU15738 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-13401
CWE-601 Low
No
No
7.6.9, 7.7.5, 7.8.5, 7.9.3, 7.10.3, 7.11.3, 7.12.3, 7.13.1 06.11.2018 SB2018110609
#VU15737 - Improper Access Control
CVE-2018-13400
CWE-284 Low
No
No
7.6.9, 7.7.5, 7.8.5, 7.9.3, 7.10.3, 7.11.3, 7.12.3, 7.13.1 06.11.2018 SB2018110609
#VU31221 - Exposure of sensitive information to an unauthorized actor
CVE-2018-13391
CWE-200 Medium
No
No
7.11.2 28.08.2018 SB2018082820
#VU14119 - Exposure of sensitive information to an unauthorized actor
CVE-2017-18104
CWE-200 Low
No
No
7.6.7, 7.11.0 30.07.2018 SB2018073014
#VU14118 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5232
CWE-79 Low
No
No
7.6.7, 7.10.1, 7.11.0 30.07.2018 SB2018073014
#VU14120 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13387
CWE-79 Low
No
No
7.6.7, 7.7.5, 7.8.5, 7.9.3, 7.10.2, 7.11.0 30.07.2018 SB2018073014
#VU13271 - Improper input validation
CVE-2018-5231
CWE-20 Low
No
No
7.6.6, 7.7.4, 7.8.4, 7.9.2 11.06.2018 SB2018061208
#VU13035 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5230
CWE-79 Low
No
No
- 28.05.2018 SB2018052902
#VU12762 - Improper input validation
CVE-2018-5224
CWE-20 Low
No
No
- 16.05.2018 SB2018030810
#VU12436 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-16863
CWE-79 Low
No
No
- 07.05.2018 SB2017121809
#VU31333 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18097
CWE-79 Low
No
No
7.6.1 06.04.2018 SB2018040613


Showing elements 161 - 180 out of 203