Vulnerabilidades en Atlassian
409 resultadosCVE-2020-14165—The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain informEPSS 1.1%CVE-2019-20408—The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal netEPSS 1.1%CVE-2021-39112—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnappEPSS 1.1%CVE-2020-36234—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site ScEPSS 1.1%CVE-2019-20414—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scEPSS 1.0%CVE-2017-9514—Bamboo before 6.0.5, 6.1.x before 6.1.4, and 6.2.x before 6.2.1 had a REST endpoint that parsed a YAML file and did not sufficiently restricEPSS 1.0%CVE-2017-14594—The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackeEPSS 1.0%CVE-2022-36802MEDIUMThe ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internaEPSS 1.0%CVE-2019-20418—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an ApplicEPSS 1.0%CVE-2017-18095—The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 (the fixed version 4.5.x) and before 4.6.0 allows remote attackerEPSS 1.0%CVE-2019-20100—The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are affected: all versionsEPSS 1.0%CVE-2017-18112—Affected versions of Atlassian Fisheye allow remote attackers to view the HTTP password of a repository via an Information Disclosure vulnerEPSS 1.0%CVE-2021-41308—Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File RepliEPSS 1.0%CVE-2018-13395—Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, EPSS 1.0%CVE-2018-5232—The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to iEPSS 1.0%CVE-2020-4021—Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject aEPSS 1.0%CVE-2020-29447—Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerEPSS 1.0%CVE-2021-26082—The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.EPSS 1.0%CVE-2018-13389—The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox BroEPSS 1.0%CVE-2019-11584—The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross sEPSS 1.0%