Known vulnerabilities in YouTrack - page 5

Vendor: JetBrains s.r.o.
Software: YouTrack
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 124
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting YouTrack YouTrack is affected by 124 known vulnerabilities: 1 critical, 3 high, 41 medium, 79 low Critical High Medium Low

Vulnerabilities (124)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153144 - Insufficiently Protected Credentials
CVE-2026-100264		 CWE-522 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153142 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-100263		 CWE-79 Medium
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153141 - Incorrect Authorization
CVE-2026-100262		 CWE-863 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153140 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-100261		 CWE-288 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153139 - Insecure Default Initialization of Resource
CVE-2026-100260		 CWE-1188 Medium
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153138 - Server-Side Request Forgery (SSRF)
CVE-2026-100257		 CWE-918 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153137 - Missing Authorization
CVE-2026-100258		 CWE-862 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153136 - Incorrect Authorization
CVE-2026-100259		 CWE-863 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU46186 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15820		 CWE-200 Medium
No
No
 2020.2.6881 01.09.2020 SB2020080810
#VU24913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 - 04.02.2020 SB2020020414
#VU24912 - Origin Validation Error
 CWE-346 Medium
No
No
 - 04.02.2020 SB2020020414
#VU24841 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7913		 CWE-79 Low
No
No
 2019.2.59309 03.02.2020 SB2020020311
#VU24840 -
CVE-2020-7912		 Medium
No
No
 2019.2.59309 03.02.2020 SB2020020311
#VU22497 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14952		 CWE-79 Low
No
No
 2019.1.52584 04.11.2019 SB2019100125
#VU22496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14953		 CWE-79 Low
No
No
 2019.2.53938 04.11.2019 SB2019100207
#VU22495 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-15041		 CWE-601 Medium
No
No
 2019.1.52545 04.11.2019 SB2019100126
#VU22493 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16171		 CWE-79 Low
No
No
 2019.2.57829 04.11.2019 SB2019100208
#VU22492 - Cross-Site Request Forgery (CSRF)
CVE-2019-15040		 CWE-352 Low
No
No
 2019.1 04.11.2019 SB2019100209
#VU22491 -
CVE-2019-14956		 Low
No
No
 2019.2.53938 04.11.2019 SB2019100207
#VU22490 - Incorrect Default Permissions
CVE-2019-18369		 CWE-276 Medium
No
No
 2019.2.55152 04.11.2019 SB2019110406


Showing elements 81 - 100 out of 124