Jira Server And Data Center
Approved changes feed: RSS · Atom
cpe:2.3:a:atlassian:jira_server_and_data_center:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Atlassian (8acde0d4-2b83-5bd8-8d3f-60d59e0b022e) |
|---|---|
| Product | Jira Server And Data Center (13373c1e-3136-549b-9f5c-710ea91eb229) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43942 |
vulnerable | 2026-06-08 05:36:44.631977 |
Details available
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (XSS) vulnerability in the /rest/collectors/1.0/template/custom endpoint. To exploit this issue, the attacker must trick a user into visiting a malicious website. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.
Published: 2022-01-04T02:40:09.824Z
Updated: 2024-10-08T14:23:31.116Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4029 |
vulnerable | 2026-06-08 05:25:58.733274 |
Details available
The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability.
Published: 2020-07-01T01:35:29.763Z
Updated: 2024-09-16T17:54:34.534Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4028 |
vulnerable | 2026-06-08 05:25:58.732876 |
Details available
Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability.
Published: 2020-06-23T12:55:12.201Z
Updated: 2024-09-16T16:48:18.602Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4025 |
vulnerable | 2026-06-08 05:25:58.725112 |
Details available
The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a rdf content type.
Published: 2020-07-01T01:35:28.857Z
Updated: 2024-09-16T22:03:15.966Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4024 |
vulnerable | 2026-06-08 05:25:58.724739 |
Details available
The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a vnd.wap.xhtml+xml content type.
Published: 2020-07-01T01:35:28.416Z
Updated: 2024-09-16T17:15:19.346Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4022 |
vulnerable | 2026-06-08 05:25:58.723794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4021 |
vulnerable | 2026-06-08 05:25:58.720847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14169 |
vulnerable | 2026-06-08 05:19:22.597501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14168 |
vulnerable | 2026-06-08 05:19:22.596399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14167 |
vulnerable | 2026-06-08 05:19:22.587124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14165 |
vulnerable | 2026-06-08 05:19:22.580687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14164 |
vulnerable | 2026-06-08 05:19:22.576010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20106 |
vulnerable | 2026-06-08 05:13:30.506000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20105 |
vulnerable | 2026-06-08 05:13:30.504746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11581 |
vulnerable | 2026-06-08 05:12:37.686948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.