Known vulnerabilities in YouTrack - page 4

Vendor: JetBrains s.r.o.
Software: YouTrack
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 70
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting YouTrack YouTrack is affected by 70 known vulnerabilities: 1 critical, 2 high, 26 medium, 41 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU24913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 - 04.02.2020 SB2020020414
#VU24841 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7913		 CWE-79 Low
No
No
 2019.2.59309 03.02.2020 SB2020020311
#VU24840 -
CVE-2020-7912		 Medium
No
No
 2019.2.59309 03.02.2020 SB2020020311
#VU22497 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14952		 CWE-79 Low
No
No
 2019.1.52584 04.11.2019 SB2019100125
#VU22496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14953		 CWE-79 Low
No
No
 2019.2.53938 04.11.2019 SB2019100207
#VU22495 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-15041		 CWE-601 Medium
No
No
 2019.1.52545 04.11.2019 SB2019100126
#VU22493 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16171		 CWE-79 Low
No
No
 2019.2.57829 04.11.2019 SB2019100208
#VU22492 - Cross-Site Request Forgery (CSRF)
CVE-2019-15040		 CWE-352 Low
No
No
 2019.1 04.11.2019 SB2019100209
#VU22491 -
CVE-2019-14956		 Low
No
No
 2019.2.53938 04.11.2019 SB2019100207
#VU22490 - Incorrect Default Permissions
CVE-2019-18369		 CWE-276 Medium
No
No
 2019.2.55152 04.11.2019 SB2019110406


Showing elements 61 - 80 out of 70