Atlassian Jira Luki w zabezpieczeniach

Oś czasu

Wersja

8.0	86
8.1	84
8.2	84
8.3	83
8.4	83

Przeciwdziałanie

Official Fix	169
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	12

Wykorzystywanie

High	3
Functional	0
Proof-of-Concept	3
Unproven	0
Not Defined	175

Wektor dostępu

Not Defined	0
Physical	0
Local	2
Adjacent	4
Network	175

Uwierzytelnianie

Not Defined	0
High	12
Low	78
None	91

Interakcja z użytkownikiem

Not Defined	0
Required	46
None	135

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	20
≤5	59
≤6	54
≤7	25
≤8	16
≤9	5
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	22
≤5	64
≤6	53
≤7	28
≤8	7
≤9	5
≤10	1

VulDB

≤1	0
≤2	0
≤3	6
≤4	23
≤5	63
≤6	49
≤7	16
≤8	23
≤9	0
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	23
≤6	31
≤7	30
≤8	17
≤9	6
≤10	5

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	1

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	54
<2k	87
<5k	40
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	181
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (331): 2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 3.1, 3.1.1, 3.4.3, 3.6.2 156, 3.9, 3.9.1, 3.9.2, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 3.9.8, 3.9.9, 3.9.11, 3.9.12, 3.9.13, 3.9.14, 3.9.15, 3.9.16, 3.10.1, 3.10.2, 3.10.3, 3.10.4, 3.10.5, 3.10.6, 3.10.7, 3.10.8, 3.10.9, 3.12, 3.12.1, 3.12.2, 3.12.3, 3.13, 3.13.1, 3.13.2, 3.13.3, 3.13.4, 3.13.5, 3.16, 3.16.1, 3.16.2, 3.16.3, 3.16.4, 3.16.5, 3.16.6, 3.16.7, 3.16.8, 4.0, 4.0.1, 4.0.2, 4.1, 4.1.1, 4.1.2, 4.2, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5, 4.3, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4, 4.4.1, 4.4.2, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.13.1, 4.13.2, 4.13.3, 4.13.4, 4.13.5, 4.13.6, 4.13.7, 4.13.8, 4.13.9, 4.13.11, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.16, 4.13.17, 4.13.18, 4.13.19, 4.13.21, 4.14, 4.15, 4.16, 4.17, 4.18, 4.19, 4.20, 4.20.1, 4.20.2, 4.20.3, 4.20.4, 4.20.5, 4.20.6, 4.20.7, 4.20.8, 4.20.9, 4.22, 4.22.1, 4.22.2, 4.22.3, 5.0, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.1, 6.2, 7, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.1, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.2, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.11, 7.3, 7.4, 7.4.1, 7.5, 7.5.1, 7.5.2, 7.5.3, 7.6, 7.6.1, 7.6.2, 7.6.3, 7.6.4, 7.6.5, 7.6.6, 7.6.7, 7.6.8, 7.6.9, 7.6.11, 7.6.12, 7.6.13, 7.6.14, 7.6.15, 7.6.16, 7.7, 7.7.1, 7.7.2, 7.7.3, 7.7.4, 7.8, 7.8.1, 7.8.2, 7.8.3, 7.8.4, 7.9, 7.9.1, 7.9.2, 7.10, 7.10.1, 7.10.2, 7.11, 7.11.1, 7.11.2, 7.12, 7.12.1, 7.12.2, 7.12.3, 7.13, 7.13.1, 7.13.2, 7.13.3, 7.13.4, 7.13.5, 7.13.6, 7.13.7, 7.13.8, 7.13.9, 7.13.11, 7.13.12, 7.13.13, 7.13.14, 7.13.15, 7.13.16, 7.13.17, 8, 8.0, 8.0.1, 8.0.2, 8.1, 8.1.1, 8.1.2, 8.2, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.3, 8.3.1, 8.3.2, 8.3.3, 8.4, 8.4.1, 8.5, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.5.5, 8.5.6, 8.5.7, 8.5.8, 8.5.9, 8.5.11, 8.5.12, 8.5.13, 8.5.14, 8.5.15, 8.5.16, 8.5.17, 8.5.18, 8.6, 8.6.1, 8.7, 8.7.1, 8.8, 8.8.1, 8.9, 8.9.1, 8.10, 8.10.1, 8.11, 8.12, 8.12.1, 8.12.2, 8.13, 8.13.1, 8.13.2, 8.13.3, 8.13.4, 8.13.5, 8.13.6, 8.13.7, 8.13.8, 8.13.9, 8.13.11, 8.13.12, 8.13.13, 8.13.14, 8.13.15, 8.13.16, 8.13.17, 8.13.18, 8.13.19, 8.13.21, 8.14, 8.15, 8.16, 8.17, 8.18, 8.18.1, 8.19, 8.20, 8.20.1, 8.20.2, 8.20.3, 8.20.4, 8.20.5, 8.20.6, 8.20.7, 8.20.8, 8.20.9, 8.21, 8.22, 8.22.1, 8.22.2, 8.22.3

Link to Product Website: https://www.atlassian.com/

Typ oprogramowania: Bug Tracking Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2023-06-26	4.4	4.4	Atlassian Jira TechTime User Management cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-36662
2023-02-01	8.3	8.3	Atlassian Jira Service Management Server and Data Center weak authentication	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-22501
2022-10-14	5.5	5.3	Atlassian Jira Align MasterUserEdit API privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-36803
2022-10-14	6.1	6.0	Atlassian Jira Align ManageJiraConnectors API privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-36802
2022-08-10	4.3	4.1	Atlassian Jira Server/Jira Data Center TeamManagement.jspa cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-36801
2022-08-03	4.3	4.1	Atlassian Jira Service Management Server/Data Center Group browsegroups.action information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-36800
2022-08-01	4.7	4.5	Atlassian JIRA Server/Data Center Velocity Template privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2022-36799
2022-07-26	6.0	5.9	Atlassian Jira Service Management Server/Data Center JSM Insight privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2021-43959
2022-07-21	7.5	7.4	Atlassian Jira Servlet Filter nieznana luka	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-26136
2022-07-21	8.0	7.9	Atlassian Jira HTTP Request Remote Code Execution	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-26137
2022-06-30	6.4	6.2	Atlassian Jira Server/Jira Data Center Mobile Plugin privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-26135
2022-04-21	7.3	7.0	Atlassian JIRA Server/Data Center Seraph weak authentication	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-0540
2022-03-08	4.7	4.5	Atlassian JIRA Server/Data Center Email Template privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-43944
2022-02-28	2.4	2.3	Atlassian JIRA Server/Data Center hierarchyConfiguration cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43945
2022-02-24	3.5	3.4	Atlassian Jira Service Management Server/Data Center InsightDefaultCustomFieldConfig.jspa cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43943
2022-02-15	4.3	4.1	Atlassian JIRA Server/Data Center Thread Contention/CPU Monitoring Service ViewInstrumentation.jspa cross site request forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43953
2022-02-15	4.3	4.1	Atlassian JIRA Server/Data Center RestoreDefaults.jspa cross site request forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43952
2022-02-15	4.3	4.1	Atlassian Jira Service Management Server/Data Center privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43948
2022-02-15	4.3	4.1	Atlassian JIRA Server/Data Center Jira-importers-plugin CsvFieldMappingsPage.jspa cross site request forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43941
2022-02-15	4.3	4.1	Atlassian Jira Service Management Server/Data Center Insight Import Source privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43950
2022-01-10	4.3	4.1	Atlassian Jira Service Management Server/Data Center Custom Fields privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43949
2022-01-10	4.3	4.1	Atlassian Jira Service Management Server/Data Center Object Import Configuration information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43951
2022-01-06	4.7	4.5	Atlassian JIRA Server/Data Center Email Template Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43947
2022-01-05	6.3	6.0	Atlassian JIRA Server/Data Center Filter Subscription EditSubscription.jspa privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-43946
2022-01-04	3.5	3.4	Atlassian JIRA Server/Data Center Endpoint custom cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-43942

156 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 156 results.

więcej wpisów autorstwa Atlassian

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!