Login Request a demo
AL
Product
Application Links
by Atlassian · last CVE Mar 17, 2020
7
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 2Medium 5Low 0
Severity
All severities7Critical0High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Application Links to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-18111
8.7
2%
Mar 29
The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document…
Affected: before 5.0.10; 5.1.0 before 5.1.3; 5.2.0 before 5.2.6
CVE-2017-18096
7.2
1%
Apr 4
The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4.0 before 5.4.3 allows remote attackers with administrative…
Affected: before 5.2.7; 5.3.0 before 5.3.4; 5.4.0 before 5.4.3
CVE-2017-16860
6.1
1%
May 14
The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version 5.3.4 and from version 5.4.0 before version 5.4.3 allows…
Affected: before 5.2.7; 5.3.0 before 5.3.4; 5.4.0 before 5.4.3
CVE-2018-20239
5.4
3%
Apr 30
Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4…
Affected: before 5.0.11; 5.1.0 before 5.2.10; 5.3.0 before 5.3.6; 5.4.0 before 5.4.12; 6.0.0 before 6.0.4
CVE-2019-20105
4.9
1%
Mar 17
The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, from version 6.1.0 before version 6.1.2,…
Affected: through 5.4.20; 6.0.0 through 6.0.12; 6.1.0 before 6.1.2; 7.1.0 before 7.1.3; 7.0.0
CVE-2018-5227
4.8
1%
Apr 10
Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or…
Affected: before 5.4.4
CVE-2019-15011
4.3
1%
Dec 17
The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version…
Affected: before 5.0.12; 5.1.0 before 5.2.11; 5.3.0 before 5.3.7; 5.4.0 before 5.4.13; 6.0.0 before 6.0.5
Showing 7