Show filters
501 Total Results
Displaying 201-210 of 501
Sort by:
Attacker Value
Unknown
CVE-2019-20410
Disclosure Date: July 03, 2020 (last updated November 28, 2024)
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0 before 8.4.2.
0
Attacker Value
Unknown
CVE-2020-14180
Disclosure Date: July 02, 2020 (last updated November 28, 2024)
Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project Request-Types and Descriptions, via an Information Disclosure vulnerability in the editform request-type-fields resource. The affected versions are before version 4.12.0.
0
Attacker Value
Unknown
CVE-2020-14166
Disclosure Date: July 01, 2020 (last updated February 21, 2025)
The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file.
0
Attacker Value
Unknown
CVE-2020-4022
Disclosure Date: July 01, 2020 (last updated February 21, 2025)
The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a mixed multipart content type.
0
Attacker Value
Unknown
CVE-2020-14164
Disclosure Date: July 01, 2020 (last updated February 21, 2025)
The WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows remote attackers to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by pasting javascript code into the editor field.
0
Attacker Value
Unknown
CVE-2019-20408
Disclosure Date: July 01, 2020 (last updated February 21, 2025)
The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class.
0
Attacker Value
Unknown
CVE-2020-14165
Disclosure Date: July 01, 2020 (last updated November 28, 2024)
The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability.
0
Attacker Value
Unknown
CVE-2020-14169
Disclosure Date: July 01, 2020 (last updated February 21, 2025)
The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability
0
Attacker Value
Unknown
CVE-2020-4025
Disclosure Date: July 01, 2020 (last updated February 21, 2025)
The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a rdf content type.
0
Attacker Value
Unknown
CVE-2020-14168
Disclosure Date: July 01, 2020 (last updated November 28, 2024)
The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.
0
