Known vulnerabilities in YouTrack - page 6

Vendor: JetBrains s.r.o.
Software: YouTrack
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 124
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting YouTrack YouTrack is affected by 124 known vulnerabilities: 1 critical, 3 high, 41 medium, 79 low Critical High Medium Low

Vulnerabilities (124)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153163 - Incorrect Authorization
CVE-2026-103488		 CWE-863 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153162 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-103489		 CWE-79 Medium
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153161 - Missing Authorization
CVE-2026-103490		 CWE-862 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153160 - Authorization Bypass Through User-Controlled Key
CVE-2026-103491		 CWE-639 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153159 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-103492		 CWE-835 Medium
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-103493		 CWE-79 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153157 - Missing Authorization
CVE-2026-100280		 CWE-862 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153156 - Server-Side Request Forgery (SSRF)
CVE-2026-100279		 CWE-918 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153155 - Incorrect Authorization
CVE-2026-100278		 CWE-863 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153154 - Incorrect Authorization
CVE-2026-100277		 CWE-863 Medium
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153153 - Incorrect Authorization
CVE-2026-100276		 CWE-863 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-100275		 CWE-79 Medium
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153151 - Allocation of Resources Without Limits or Throttling
CVE-2026-100274		 CWE-770 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153150 - Incorrect Authorization
CVE-2026-100273		 CWE-863 Medium
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153149 - Authorization Bypass Through User-Controlled Key
CVE-2026-100272		 CWE-639 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153148 - Missing Authorization
CVE-2026-100271		 CWE-862 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153147 - Missing Authorization
CVE-2026-100269		 CWE-862 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153146 - Authorization Bypass Through User-Controlled Key
CVE-2026-100268		 CWE-639 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153145 - Inefficient Regular Expression Complexity
CVE-2026-100267		 CWE-1333 Medium
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153143 - Incorrect Authorization
CVE-2026-100270		 CWE-863 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228


Showing elements 101 - 120 out of 124