[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*


oval:org.secpod.oval:def:83754
Atlassian Jira Server is installed

oval:org.secpod.oval:def:83748
Atlassian Jira Server is installed

oval:org.secpod.oval:def:90993
The host is installed with Atlassian Jira Server before 8.5.14, 8.6.0 before 8.13.6, or 8.14.0 before 8.16.1 and is prone to a path traversal vulnerability. A flaw is present in the application which fails to properly handle an issue in the /WEB-INF/web.xml endpoint. Successful exploitation could al ...

oval:org.secpod.oval:def:90994
The host is installed with Atlassian Jira Server before 8.13.14, or 8.14.0 before 8.19.0 and is prone to a denial of service vulnerability. A flaw is present in the application which fails to properly handle an issue in the GIF Image Reader component. Successful exploitation could allow remote attac ...

oval:org.secpod.oval:def:90995
The host is installed with Atlassian Jira Server before 8.13.12, or 8.14.0 before 8.19.1 and is prone to a server-side template injection vulnerability. A flaw is present in the application which fails to properly handle an issue in the Email Template feature used in the Jira Service Management addo ...

oval:org.secpod.oval:def:90996
The host is installed with Atlassian Jira Server before 8.5.10, or 8.6.0 before 8.13.1 and is prone to a cross-site request forgery vulnerability. A flaw is present in the application which fails to properly handle an issue in the referrer headers which discloses a user's CSRF token. Successful expl ...

oval:org.secpod.oval:def:90997
The host is installed with Atlassian Jira Server before 8.20.7 and is prone to a privilege escalation vulnerability. A flaw is present in the application which fails to properly handle an issue in the /secure/admin/ConfigureBatching!default.jspa endpoint. Successful exploitation could allow remote a ...

oval:org.secpod.oval:def:90998
The host is installed with Atlassian Jira Server before 8.13.21, or 8.14.0 before 8.20.9 and is prone to an improper access control vulnerability. A flaw is present in the application which fails to properly handle an issue in the /secure/EditSubscription.jspa endpoint. Successful exploitation could ...

oval:org.secpod.oval:def:90999
The host is installed with Atlassian Jira Server before 8.13.18, or 8.20.0 before 8.20.6 and is prone to a cross-site request forgery vulnerability. A flaw is present in the application which fails to properly handle an issue in the /secure/admin/RestoreDefaults.jspa endpoint. Successful exploitatio ...

oval:org.secpod.oval:def:91000
The host is installed with Atlassian Jira Server before 8.13.15, or 8.14.0 before 8.20.3 and is prone to a cross-site request forgery vulnerability. A flaw is present in the application which fails to properly handle an issue in the jira-importers-plugin. Successful exploitation could allow remote a ...

oval:org.secpod.oval:def:91001
The host is installed with Atlassian Jira Server before 8.13.15, or 8.14.0 before 8.20.3 and is prone to a code injection vulnerability. A flaw is present in the application which fails to properly handle an issue in the Email Templates feature. Successful exploitation could allow remote attackers w ...

oval:org.secpod.oval:def:91003
The host is installed with Atlassian Jira Server 8.0.0 before 8.13.22, 8.14.0 before 8.20.10, or 8.21.0 before 8.22.4 and is prone to a server-side request forgery vulnerability. A flaw is present in the application which fails to properly handle the Mobile Plugin for Jira Data Center and Server. Su ...

oval:org.secpod.oval:def:91004
The host is installed with Atlassian Jira Server before 8.13.19, 8.14.0 before 8.20.7, or 8.21.0 before 8.22.1 and is prone to a code injection vulnerability. A flaw is present in the application which fails to properly handle the Email Templates feature. Successful exploitation could allows a remot ...

oval:org.secpod.oval:def:91005
The host is installed with Atlassian Jira Server before 8.20.8 and is prone to a reflected cross-site scripting vulnerability. A flaw is present in the application which fails to properly handle an issue in the TeamManagement.jspa endpoint. Successful exploitation could allow remote attackers to inj ...

oval:org.secpod.oval:def:91002
The host is installed with Atlassian Jira Server before 8.13.18, 8.14.0 before 8.20.6, or 8.21.0 before 8.22.0 and is prone to an authentication bypass vulnerability. A flaw is present in the application which fails to properly handle a specially crafted HTTP request. Successful exploitation could a ...

oval:org.secpod.oval:def:92780
The host is installed with Atlassian Jira Server before 8.13.12, or 8.14.0 before 8.20.2 and is prone to a cross-site scripting vulnerability. A flaw is present in the application which fails to properly handle the /secure/admin/ImporterFinishedPage.jspa error message. Successful exploitation could ...

oval:org.secpod.oval:def:92781
The host is installed with Atlassian Jira Server before 8.6.0, 8.7.0 before 8.13.12, or 8.14.0 before 8.20.1 and is prone to an improper authorization vulnerability. A flaw is present in the application which fails to properly handle an issue in the 'ReplicationSettings!default.jspa' endpoint. Succe ...

oval:org.secpod.oval:def:92782
The host is installed with Atlassian Jira Server before 8.13.15, or 8.14.0 before 8.20.3 and is prone to a reflected cross-site scripting (xss) vulnerability. A flaw is present in the application which fails to properly handle the /rest/collectors/1.0/template/custom endpoint. Successful exploitatio ...

oval:org.secpod.oval:def:92783
The host is installed with Atlassian Jira Server before 8.20.3 and is prone to a stored cross-site scripting (xss) vulnerability. A flaw is present in the application which fails to properly handle the /rest/collectors/1.0/template/custom endpoint. Successful exploitation could allow remote attacker ...

oval:org.secpod.oval:def:92784
The host is installed with Atlassian Jira Server before 8.13.15, or 8.14.0 before 8.20.3 and is prone to a remote code execution vulnerability. A flaw is present in the application which fails to properly handle the Email Templates feature. Successful exploitation could allow remote attackers with a ...

oval:org.secpod.oval:def:92869
The host is installed with Atlassian Jira Server before 8.5.14, 8.6.0 before 8.13.6, or 8.14.0 before 8.16.1 and is prone to a reflected XSS vulnerability. A flaw is present in the application which fails to properly handle the number range searcher component. Successful exploitation could allow rem ...

oval:org.secpod.oval:def:92870
The host is installed with Atlassian Jira Server before 8.5.15, 8.6.0 before 8.13.7, or 8.14.0 before 8.17.0 and is prone to a cross site scripting vulnerability. A flaw is present in the application which fails to properly handle the CardLayoutConfigTable component. Successful exploitation could al ...

oval:org.secpod.oval:def:92871
The host is installed with Atlassian Jira Server before 8.5.14, 8.6.0 before 8.13.6, or 8.14.0 before 8.16.1 and is prone to a username enumeration vulnerability. A flaw is present in the application which fails to properly handle a sensitive data exposure vulnerability in the '/rest/api/latest/user ...

oval:org.secpod.oval:def:92872
The host is installed with Atlassian Jira Server before 8.5.14, 8.6.0 before 8.13.6, or 8.14.0 before 8.17.0 and is prone to a stored XSS vulnerability. A flaw is present in the application which fails to properly handle the XML Export component. Successful exploitation could allow remote attackers ...

oval:org.secpod.oval:def:92873
The host is installed with Atlassian Jira Server before 8.5.14, 8.6.0 before 8.13.6, or 8.14.0 before 8.16.1 and is prone to a cross-site scripting vulnerability. A flaw is present in the application which fails to properly handle the Export HTML Report feature. Successful exploitation could allow r ...

oval:org.secpod.oval:def:92874
The host is installed with Atlassian Jira Server before 8.5.18, 8.6.0 before 8.13.10, or 8.14.0 before 8.18.2 and is prone to a cross-site scripting vulnerability. A flaw is present in the application which fails to properly handle the supplied content such as from a PDF when pasted into a field suc ...

oval:org.secpod.oval:def:92875
The host is installed with Atlassian Jira Server before 8.5.15, 8.6.0 before 8.13.7, 8.14.0 before 8.17.1, or 8.18.0 before 8.18.1 and is prone to a reverse tabnapping vulnerability. A flaw is present in the application which fails to properly handle the Project Shortcuts feature. Successful exploit ...

oval:org.secpod.oval:def:92876
The host is installed with Atlassian Jira Server before 8.13.9, or 8.14.0 before 8.18.0 and is prone to a broken access control vulnerability. A flaw is present in the application which fails to properly handle the allowlist feature. Successful exploitation could allow remote attackers to continue t ...

oval:org.secpod.oval:def:92877
The host is installed with Atlassian Jira Server before 8.5.18, 8.6.0 before 8.13.10, or 8.14.0 before 8.18.2 and is prone to an information disclosure vulnerability. A flaw is present in the application which fails to properly handle the /rest/api/latest/projectvalidate/key endpoint. Successful exp ...

oval:org.secpod.oval:def:92878
The host is installed with Atlassian Jira Server before 8.5.13, 8.6.0 before 8.13.5, or 8.14.0 before 8.15.1 and is prone to an information disclosure vulnerability. A flaw is present in the application which fails to properly handle the /rest/api/2/search endpoint. Successful exploitation could all ...

oval:org.secpod.oval:def:92879
The host is installed with Atlassian Jira Server before 8.5.10, or 8.6.0 before 8.13.1 and is prone to a username enumeration vulnerability. A flaw is present in the application which fails to properly handle the password reset page. Successful exploitation could allow remote attackers to discover t ...

oval:org.secpod.oval:def:92880
The host is installed with Atlassian Jira Server before 8.5.10, or 8.6.0 before 8.13.1 and is prone to a broken access control vulnerability. A flaw is present in the application which fails to properly handle the query component JQL endpoint. Successful exploitation could allow remote attackers to ...

oval:org.secpod.oval:def:92881
The host is installed with Atlassian Jira Server before 8.13.12, or 8.14.0 before 8.20.0 and is prone to an insecure direct object references (IDOR) vulnerability. A flaw is present in the application which fails to properly handle the Average Time in Status Gadget. Successful exploitation could all ...

oval:org.secpod.oval:def:92882
The host is installed with Atlassian Jira Server before 8.13.12, or 8.14.0 before 8.20.0 and is prone to an insecure direct object references (IDOR) vulnerability. A flaw is present in the application which fails to properly handle the Workload Pie Chart Gadget. Successful exploitation could allow r ...

CVE    130
CVE-2021-26080
CVE-2021-26082
CVE-2021-26081
CVE-2021-26083
...
*CPE
cpe:/a:atlassian:jira_server

© SecPod Technologies