Atlassian Jira Server Schwachstellen

Version

8.0	90
8.1	90
8.2	90
8.3	88
8.4	88

Massnahmen

Official Fix	118
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Ausnutzbarkeit

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	118

Zugriffsart

Not Defined	0
Physical	0
Local	0
Adjacent	4
Network	114

Authentisierung

Not Defined	0
High	8
Low	50
None	60

Benutzeraktivität

Not Defined	0
Required	26
None	92

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	12
≤5	42
≤6	34
≤7	20
≤8	8
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	14
≤5	42
≤6	34
≤7	20
≤8	6
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	4
≤4	16
≤5	38
≤6	40
≤7	6
≤8	14
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	18
≤6	24
≤7	18
≤8	14
≤9	4
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	44
<2k	52
<5k	22
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit heute

<1k	118
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (221): 2, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 4.0, 4.2, 4.13, 4.13.1, 4.13.2, 4.13.3, 4.13.4, 4.13.5, 4.13.6, 4.13.7, 4.13.8, 4.13.9, 4.13.11, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.16, 4.13.17, 4.13.18, 4.13.19, 4.13.21, 4.20.1, 4.20.2, 4.20.3, 4.20.4, 4.20.5, 4.20.6, 4.20.7, 4.20.8, 4.20.9, 4.22, 4.22.1, 4.22.2, 4.22.3, 5.0, 6.0, 6.1, 6.2, 7, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.1, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.6.2, 7.6.3, 7.6.4, 7.6.5, 7.6.6, 7.6.7, 7.6.8, 7.6.9, 7.6.11, 7.6.12, 7.6.13, 7.6.14, 7.6.15, 7.6.16, 7.7, 7.7.1, 7.7.2, 7.7.3, 7.7.4, 7.8, 7.8.1, 7.8.2, 7.8.3, 7.8.4, 7.9, 7.9.1, 7.9.2, 7.10, 7.10.1, 7.10.2, 7.11, 7.11.1, 7.12, 7.13, 7.13.1, 7.13.2, 7.13.3, 7.13.4, 7.13.5, 7.13.6, 7.13.7, 7.13.8, 7.13.9, 7.13.11, 7.13.12, 7.13.13, 7.13.14, 7.13.15, 7.13.16, 7.13.17, 8, 8.0, 8.0.1, 8.0.2, 8.1, 8.1.1, 8.1.2, 8.2, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.3, 8.3.1, 8.3.2, 8.3.3, 8.4, 8.4.1, 8.5, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.5.5, 8.5.6, 8.5.7, 8.5.8, 8.5.9, 8.5.11, 8.5.12, 8.5.13, 8.5.14, 8.5.15, 8.5.16, 8.5.17, 8.5.18, 8.6, 8.6.1, 8.7, 8.7.1, 8.8, 8.8.1, 8.9, 8.9.1, 8.10, 8.10.1, 8.11, 8.12, 8.12.1, 8.12.2, 8.13, 8.13.1, 8.13.2, 8.13.3, 8.13.4, 8.13.5, 8.13.6, 8.13.7, 8.13.8, 8.13.9, 8.13.11, 8.13.12, 8.13.13, 8.13.14, 8.13.15, 8.13.16, 8.13.17, 8.13.18, 8.13.19, 8.13.21, 8.14, 8.15, 8.16, 8.17, 8.18, 8.18.1, 8.19, 8.20, 8.20.1, 8.20.2, 8.20.3, 8.20.4, 8.20.5, 8.20.6, 8.20.7, 8.20.8, 8.20.9, 8.21, 8.22, 8.22.1, 8.22.2, 8.22.3

Link to Product Website: https://www.atlassian.com/

Softwaretyp: Bug Tracking Software

Veröffentlicht	Base	Temp	Schwachstelle	0day	Heute	Aus	Mas	CTI	CVE
10.08.2022	4.3	4.1	Atlassian Jira Server/Jira Data Center TeamManagement.jspa Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-36801
01.08.2022	4.7	4.5	Atlassian JIRA Server/Data Center Velocity Template erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2022-36799
30.06.2022	6.4	6.2	Atlassian Jira Server/Jira Data Center Mobile Plugin erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-26135
21.04.2022	7.3	7.0	Atlassian JIRA Server/Data Center Seraph schwache Authentisierung	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-0540
08.03.2022	4.7	4.5	Atlassian JIRA Server/Data Center Email Template erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-43944
28.02.2022	2.4	2.3	Atlassian JIRA Server/Data Center hierarchyConfiguration Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43945
15.02.2022	4.3	4.1	Atlassian JIRA Server/Data Center Thread Contention/CPU Monitoring Service ViewInstrumentation.jspa Cross Site Request Forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43953
15.02.2022	4.3	4.1	Atlassian JIRA Server/Data Center RestoreDefaults.jspa Cross Site Request Forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43952
15.02.2022	4.3	4.1	Atlassian JIRA Server/Data Center Jira-importers-plugin CsvFieldMappingsPage.jspa Cross Site Request Forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43941
06.01.2022	4.7	4.5	Atlassian JIRA Server/Data Center Email Template Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43947
05.01.2022	6.3	6.0	Atlassian JIRA Server/Data Center Filter Subscription EditSubscription.jspa erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-43946
04.01.2022	3.5	3.4	Atlassian JIRA Server/Data Center Endpoint custom Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43942
08.12.2021	7.3	7.0	Atlassian JIRA Server/Data Center Roles Settings roles schwache Authentisierung	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2021-41311
08.12.2021	7.3	7.0	Atlassian JIRA Server/Data Center Service Management Project resource schwache Authentisierung	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41309
03.11.2021	7.4	7.2	Atlassian JIRA Server/Data Center Jira Service Management Project ViewCollectors schwache Authentisierung	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41312
02.11.2021	4.8	4.7	Atlassian JIRA Server/Data Center Associated Project AssociatedProjectsForCustomField.jspa Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41310
01.11.2021	5.3	5.2	Atlassian JIRA Server/Data Center Email Batch Confirguation ConfigureBatching!default.jspa erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41313
26.10.2021	4.8	4.7	Atlassian JIRA Server/Data Center Error Message ImporterFinishedPage.jspa Cross Site Scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41304
26.10.2021	6.4	6.2	Atlassian JIRA Server/Data Center File Replication Setting ReplicationSettings!default.jspa erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41308
26.10.2021	7.4	7.2	Atlassian JIRA Server/Data Center Private Project erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41307
26.10.2021	5.9	5.8	Atlassian JIRA Server/Data Center Private Project erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-41306
26.10.2021	7.4	7.2	Atlassian JIRA Server/Data Center Project erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2021-41305
21.10.2021	5.8	5.7	Atlassian JIRA Server/Data Center JQL Endpoint erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2021-39127
21.10.2021	6.1	6.1	Atlassian JIRA Server/Data Center Referer Cross Site Request Forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2021-39126
16.09.2021	4.7	4.5	Atlassian JIRA Server/Data Center Service Management Addon erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-39128