CVE-2021-43945

< 8.20.3

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to injec

4.8MEDIUM

CVE-2021-43953

< 8.13.16

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention

4.3MEDIUM

CVE-2021-43947

< 8.13.15

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitra

7.2HIGH

CVE-2021-41312

< 8.19.1

Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Serv

7.5HIGH

CVE-2021-41304

< 8.13.12

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript

6.1MEDIUM

CVE-2021-39125

< 8.5.10

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users via

5.3MEDIUM

CVE-2021-39124

< 8.16.0

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows

4.3MEDIUM

CVE-2021-39123

< 8.16.0

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's avai

7.5HIGH

CVE-2021-39118

< 8.19.0

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of user

5.3MEDIUM

CVE-2019-20101

< 8.13.3

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken A

5.3MEDIUM

CVE-2021-39122

< 8.5.13

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Informati

5.3MEDIUM

CVE-2021-39121

< 8.5.18

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private J

4.3MEDIUM

CVE-2021-39119

< 8.19.0

Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on

5.3MEDIUM

CVE-2021-39117

< 8.18.0

The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject

4.8MEDIUM

CVE-2021-39113

< 8.13.9

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content eve

7.5HIGH

CVE-2021-39111

< 8.5.18

The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version 8.14

6.1MEDIUM

CVE-2021-39112

< 8.5.15

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a rever

4.8MEDIUM

CVE-2017-18113

< 8.18.1

The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can

8.8HIGH

CVE-2021-26083

< 8.5.14

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from

5.4MEDIUM

CVE-2021-26082

< 8.5.14

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from ver

5.4MEDIUM

CVE-2021-26081

< 8.5.14

REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8

5.3MEDIUM

CVE-2021-26079

< 8.5.15

The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before versi

6.1MEDIUM

CVE-2021-26078

< 8.5.14

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8

6.1MEDIUM

CVE-2020-36289

< 8.5.13

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Dis

5.3MEDIUM

CVE-2021-26076

< 8.5.12

The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version

3.7LOW

CVE-2021-26075

< 8.5.12

The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6

4.3MEDIUM

CVE-2020-36288

< 8.5.12

The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.

6.1MEDIUM

CVE-2020-36287

< 8.13.5

The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version

5.3MEDIUM

CVE-2021-26071

< 8.5.13

The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5

3.5LOW

CVE-2020-36286

< 8.5.13

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5,

5.3MEDIUM

CVE-2020-36238

< 8.5.13

The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5,

5.3MEDIUM

CVE-2021-26070

< 8.13.3

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protection of app-l

7.2HIGH

CVE-2021-26069

< 8.5.11

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and

5.3MEDIUM

CVE-2020-29453

>= 8.5.10 and < 8.5.11

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3,

5.3MEDIUM

CVE-2020-29451

< 8.5.11

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Information Di

4.3MEDIUM

CVE-2020-36237

< 8.15.0

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via

5.3MEDIUM

CVE-2020-36234

< 8.5.11

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cro

4.8MEDIUM

CVE-2020-14181

< 7.13.6

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Dis

5.3MEDIUM