Show filters
136 Total Results
Displaying 61-70 of 136
Sort by:
Attacker Value
Unknown
CVE-2019-20410
Disclosure Date: July 03, 2020 (last updated November 28, 2024)
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0 before 8.4.2.
0
Attacker Value
Unknown
CVE-2020-4022
Disclosure Date: July 01, 2020 (last updated February 21, 2025)
The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a mixed multipart content type.
0
Attacker Value
Unknown
CVE-2020-4025
Disclosure Date: July 01, 2020 (last updated February 21, 2025)
The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a rdf content type.
0
Attacker Value
Unknown
CVE-2020-14167
Disclosure Date: July 01, 2020 (last updated November 28, 2024)
The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impact the application's availability via an Denial of Service (DoS) vulnerability.
0
Attacker Value
Unknown
CVE-2020-14168
Disclosure Date: July 01, 2020 (last updated November 28, 2024)
The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.
0
Attacker Value
Unknown
CVE-2020-4024
Disclosure Date: July 01, 2020 (last updated February 21, 2025)
The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a vnd.wap.xhtml+xml content type.
0
Attacker Value
Unknown
CVE-2020-4029
Disclosure Date: July 01, 2020 (last updated November 28, 2024)
The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability.
0
Attacker Value
Unknown
CVE-2020-4021
Disclosure Date: April 23, 2020 (last updated February 21, 2025)
Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the XML export view.
0
Attacker Value
Unknown
CVE-2019-20419
Disclosure Date: April 22, 2020 (last updated February 21, 2025)
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. The affected versions are before version 8.5.5, and from version 8.6.0 before 8.7.2.
0
Attacker Value
Unknown
CVE-2019-20413
Disclosure Date: April 08, 2020 (last updated November 28, 2024)
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2.
0
