Known vulnerabilities in YouTrack - page 2

Vendor: JetBrains s.r.o.
Software: YouTrack
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 124
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting YouTrack YouTrack is affected by 124 known vulnerabilities: 1 critical, 3 high, 41 medium, 79 low Critical High Medium Low

Vulnerabilities (124)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147352 - Incorrect Authorization
CVE-2026-86487		 CWE-863 Low
No
No
 2026.2.18634 07.09.2026 SB20260907135
#VU147351 - Authorization Bypass Through User-Controlled Key
CVE-2026-86488		 CWE-639 Medium
No
No
 2026.2.18634 07.09.2026 SB20260907135
#VU143876 - Missing Authorization
CVE-2026-75051		 CWE-862 Low
No
No
 2026.2.17917 17.08.2026 SB20260817110
#VU143875 - Allocation of Resources Without Limits or Throttling
CVE-2026-75050		 CWE-770 Medium
No
No
 2026.1.13901, 2026.2.17950 17.08.2026 SB20260817109
#VU143874 - Missing Authorization
CVE-2026-75049		 CWE-862 Low
No
No
 2026.1.13903, 2026.2.17950 17.08.2026 SB20260817109
#VU143873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-75048		 CWE-79 Low
No
No
 2026.2.18068 17.08.2026 SB20260817108
#VU143872 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-75047		 CWE-409 Medium
No
No
 2026.2.18177 17.08.2026 SB20260817107
#VU143871 - Missing Authorization
CVE-2026-75046		 CWE-862 Low
No
No
 2026.2.18112 17.08.2026 SB20260817104
#VU143870 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-75045		 CWE-288 Medium
No
No
 2025.3.156085, 2026.1.13913, 2026.2.18112 17.08.2026 SB20260817104
#VU143861 - Missing Authorization
CVE-2026-75044		 CWE-862 Low
No
No
 2025.3.156085, 2026.1.13914, 2026.2.18095 17.08.2026 SB20260817104
#VU143847 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-61492		 CWE-79 Low
No
No
 2026.2.17394 17.08.2026 SB20260817100
#VU143842 - Improper Restriction of Rendered UI Layers or Frames
CVE-2026-59791		 CWE-1021 Low
No
No
 2026.2.17012 17.08.2026 SB2026081798
#VU143837 - Missing Authorization
CVE-2026-57923		 CWE-862 Low
No
No
 2026.2.16593 17.08.2026 SB2026081796
#VU143836 - Missing Authorization
CVE-2026-57922		 CWE-862 Low
No
No
 2026.2.16593 17.08.2026 SB2026081796
#VU143835 - Missing Authorization
CVE-2026-57921		 CWE-862 Low
No
No
 2026.2.16593 17.08.2026 SB2026081796
#VU143911 - Missing Authorization
CVE-2025-53959		 CWE-862 Low
No
No
 2024.3.85077, 2025.1.86199, 2025.2.86069 15.07.2025 SB2025071547
#VU143900 - Missing Authentication for Critical Function
CVE-2025-47850		 CWE-306 Low
No
No
 2025.1.74704 20.05.2025 SB20250520152
#VU143901 - Missing Authentication for Critical Function
CVE-2025-48391		 CWE-306 Low
No
No
 2025.1.76253 20.05.2025 SB20250520151
#VU143878 - Authentication Bypass by Spoofing
CVE-2025-24458		 CWE-290 High
No
No
 2024.3.55417 21.01.2025 SB20250121100
#VU143879 - Information Exposure Through Log Files
CVE-2025-24457		 CWE-532 Low
No
No
 2024.3.55417 21.01.2025 SB20250121100


Showing elements 21 - 40 out of 124