Known vulnerabilities in YouTrack - page 2

Vendor: JetBrains s.r.o.
Software: YouTrack
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 70
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting YouTrack YouTrack is affected by 70 known vulnerabilities: 1 critical, 2 high, 26 medium, 41 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143827 - Missing Authorization
CVE-2026-49385		 CWE-862 Low
No
No
 2026.1.13570 17.08.2026 SB2026081788
#VU143813 - Authorization Bypass Through User-Controlled Key
CVE-2026-49386		 CWE-639 Low
No
No
 2026.1.13570 17.08.2026 SB2026081788
#VU129685 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-33392		 CWE-1336 Low
No
No
 2025.3.131383 05.05.2026 SB2026050547
#VU123264 - Missing Authorization
CVE-2026-28193		 CWE-862 Medium
No
No
 2025.3.121962 25.02.2026 SB2026022545
#VU122465 - Information Exposure Through Log Files
CVE-2026-25846		 CWE-532 Medium
No
No
 2025.3.119033 09.02.2026 SB2026020942
#VU118311 - Allocation of Resources Without Limits or Throttling
CVE-2025-64773		 CWE-770 Low
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118235 - Operation on a Resource after Expiration or Release
CVE-2025-64686		 CWE-672 Low
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118234 - Improper Certificate Validation
CVE-2025-64685		 CWE-295 Medium
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118233 - Missing Authorization
CVE-2025-64684		 CWE-862 Low
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118232 - Missing Authorization
CVE-2025-64690		 CWE-862 Medium
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118231 - Insufficiently Protected Credentials
CVE-2025-64689		 CWE-522 High
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118230 - Authorization Bypass Through User-Controlled Key
CVE-2025-64688		 CWE-639 Medium
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118229 - Missing Authorization
CVE-2025-64687		 CWE-862 Medium
No
No
 2025.3.104432 10.11.2025 SB2025111101
#VU114383 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-57731		 CWE-79 Low
No
No
 2025.2.92387 22.08.2025 SB2025082218
#VU113415 - Improper Restriction of Rendered UI Layers or Frames
CVE-2025-54527		 CWE-1021 Low
No
No
 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 29.07.2025 SB2025072961
#VU143911 - Missing Authorization
CVE-2025-53959		 CWE-862 Low
No
No
 2024.3.85077, 2025.1.86199, 2025.2.86069 15.07.2025 SB2025071547
#VU143900 - Missing Authentication for Critical Function
CVE-2025-47850		 CWE-306 Low
No
No
 2025.1.74704 20.05.2025 SB20250520152
#VU143901 - Missing Authentication for Critical Function
CVE-2025-48391		 CWE-306 Low
No
No
 2025.1.76253 20.05.2025 SB20250520151
#VU143878 - Authentication Bypass by Spoofing
CVE-2025-24458		 CWE-290 High
No
No
 2024.3.55417 21.01.2025 SB20250121100
#VU143879 - Information Exposure Through Log Files
CVE-2025-24457		 CWE-532 Low
No
No
 2024.3.55417 21.01.2025 SB20250121100


Showing elements 21 - 40 out of 70