DC
Product
Data Center
38
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 30Low 2
Watch
Add Data Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18113 | 8.8 | Aug 2 | The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator to import their… Affected: before 8.18.1 |
| CVE-2021-41312 | 7.5 | Nov 3 | Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issue… Affected: before 8.19.1 |
| CVE-2021-39123 | 7.5 | Sep 14 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service (DoS)… Affected: before 8.16.0 |
| CVE-2021-39113 | 7.5 | Aug 30 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access… Affected: before 8.13.9 |
| CVE-2021-43947 | 7.2 | Jan 6 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitrary code via a Remote Code Execution (RCE)… Affected: before 8.13.15 |
| CVE-2021-26070 | 7.2 | Mar 22 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protection of app-linked resources via a Broken Authentication… Affected: before 8.13.3; 8.14.0 before 8.14.1 |
| CVE-2021-41304 | 6.1 | Oct 26 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability… Affected: before 8.13.12 |
| CVE-2021-39111 | 6.1 | Aug 30 | The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version 8.14.0 before 8.18.2 allows remote attackers to… Affected: before 8.5.18 |
| CVE-2021-26079 | 6.1 | Jun 7 | The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before version 8.13.7, and from version 8.14.0 before 8.17.0… Affected: before 8.5.15 |
| CVE-2021-26078 | 6.1 | Jun 7 | The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version… Affected: before 8.5.14; 8.6.0 before 8.13.6; 8.14.0 before 8.16.1 |
| CVE-2020-36288 | 6.1 | Apr 15 | The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.1… Affected: before 8.5.12 |
| CVE-2021-26083 | 5.4 | Jul 20 | Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote… Affected: before 8.5.14 |
| CVE-2021-26082 | 5.4 | Jul 20 | The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers… Affected: before 8.5.14 |
| CVE-2021-39125 | 5.3 | Sep 14 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users via an enumeration vulnerability in the password… Affected: before 8.5.10; 8.6.0 before 8.13.1 |
| CVE-2021-39118 | 5.3 | Sep 14 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an enumeration vulnerability in the… Affected: before 8.19.0 |
| CVE-2019-20101 | 5.3 | Sep 14 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulnerability in the… Affected: before 8.13.3; 8 |
| CVE-2021-39122 | 5.3 | Sep 8 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability in the… Affected: before 8.5.13 |
| CVE-2021-39119 | 5.3 | Sep 1 | Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after their Jira account is… Affected: before 8.19.0 |
| CVE-2021-26081 | 5.3 | Jul 20 | REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to… Affected: before 8.5.14 |
| CVE-2020-36289 | 5.3 | May 12 | Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the… Affected: before 8.5.13 |
| CVE-2020-36287 | 5.3 | Apr 9 | The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version… Affected: before 8.13.5 |
| CVE-2020-36286 | 5.3 | Apr 1 | The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1… Affected: before 8.5.13 |
| CVE-2020-36238 | 5.3 | Apr 1 | The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1… Affected: before 8.5.13 |
| CVE-2021-26069 | 5.3 | Mar 22 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an Information… Affected: before 8.5.11; 8.6.0 before 8.13.3 |
| CVE-2020-29453 | 5.3 | Feb 22 | The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed… Affected: 8.5.10 before 8.5.11; 8.6.0 before 8.13.3 |
| CVE-2020-36237 | 5.3 | Feb 15 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the… Affected: before 8.15.0 |
| CVE-2020-14181 | 5.3 | Sep 17 | Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa… Affected: before 7.13.6; 8.0.0 before 8.5.7; 8.6.0 before 8.12.0 |
| CVE-2021-43945 | 4.8 | Feb 28 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrary HTML or JavaScript via a Stored… Affected: before 8.20.3 |
| CVE-2021-39117 | 4.8 | Aug 30 | The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site… Affected: before 8.18.0 |
| CVE-2021-39112 | 4.8 | Aug 25 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project… Affected: before 8.5.15 |
| CVE-2020-36234 | 4.8 | Feb 15 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the… Affected: before 8.5.11; 8.6.0 before 8.13.3 |
| CVE-2021-43953 | 4.3 | Feb 15 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings via a Cross-Site… Affected: before 8.13.16; 8.14.0 before 8.20.5 |
| CVE-2021-39124 | 4.3 | Sep 14 | The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user… Affected: before 8.16.0 |
| CVE-2021-39121 | 4.3 | Sep 8 | Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure… Affected: before 8.5.18 |
| CVE-2021-26075 | 4.3 | Apr 15 | The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from version 8.14.0 before… Affected: before 8.5.12 |
| CVE-2020-29451 | 4.3 | Feb 15 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Information Disclosure vulnerability in the Jira Projects… Affected: before 8.5.11; 8.6.0 before 8.13.3; 8.14.0 before 8.14.1 |
| CVE-2021-26076 | 3.7 | Apr 15 | The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version… Affected: before 8.5.12 |
| CVE-2021-26071 | 3.5 | Apr 1 | The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1… Affected: before 8.5.13 |
Showing 38