Atlassian Jira Server 漏洞

时间轴

版本

8.088
8.186
8.286
8.386
8.486

修正

Official Fix118
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined118

访问向量

Not Defined0
Physical0
Local0
Adjacent4
Network114

身份验证

Not Defined0
High8
Low56
None54

用户交互

Not Defined0
Required24
None94

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤412
≤540
≤636
≤720
≤86
≤94
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤414
≤540
≤638
≤720
≤82
≤94
≤100

VulDB

≤10
≤20
≤34
≤414
≤538
≤638
≤712
≤812
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤520
≤620
≤720
≤812
≤92
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k36
<2k52
<5k30
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k118
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (221): 2, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 4.0, 4.2, 4.13, 4.13.1, 4.13.2, 4.13.3, 4.13.4, 4.13.5, 4.13.6, 4.13.7, 4.13.8, 4.13.9, 4.13.11, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.16, 4.13.17, 4.13.18, 4.13.19, 4.13.21, 4.20.1, 4.20.2, 4.20.3, 4.20.4, 4.20.5, 4.20.6, 4.20.7, 4.20.8, 4.20.9, 4.22, 4.22.1, 4.22.2, 4.22.3, 5.0, 6.0, 6.1, 6.2, 7, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.1, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.6.2, 7.6.3, 7.6.4, 7.6.5, 7.6.6, 7.6.7, 7.6.8, 7.6.9, 7.6.11, 7.6.12, 7.6.13, 7.6.14, 7.6.15, 7.6.16, 7.7, 7.7.1, 7.7.2, 7.7.3, 7.7.4, 7.8, 7.8.1, 7.8.2, 7.8.3, 7.8.4, 7.9, 7.9.1, 7.9.2, 7.10, 7.10.1, 7.10.2, 7.11, 7.11.1, 7.12, 7.13, 7.13.1, 7.13.2, 7.13.3, 7.13.4, 7.13.5, 7.13.6, 7.13.7, 7.13.8, 7.13.9, 7.13.11, 7.13.12, 7.13.13, 7.13.14, 7.13.15, 7.13.16, 7.13.17, 8, 8.0, 8.0.1, 8.0.2, 8.1, 8.1.1, 8.1.2, 8.2, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.3, 8.3.1, 8.3.2, 8.3.3, 8.4, 8.4.1, 8.5, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.5.5, 8.5.6, 8.5.7, 8.5.8, 8.5.9, 8.5.11, 8.5.12, 8.5.13, 8.5.14, 8.5.15, 8.5.16, 8.5.17, 8.5.18, 8.6, 8.6.1, 8.7, 8.7.1, 8.8, 8.8.1, 8.9, 8.9.1, 8.10, 8.10.1, 8.11, 8.12, 8.12.1, 8.12.2, 8.13, 8.13.1, 8.13.2, 8.13.3, 8.13.4, 8.13.5, 8.13.6, 8.13.7, 8.13.8, 8.13.9, 8.13.11, 8.13.12, 8.13.13, 8.13.14, 8.13.15, 8.13.16, 8.13.17, 8.13.18, 8.13.19, 8.13.21, 8.14, 8.15, 8.16, 8.17, 8.18, 8.18.1, 8.19, 8.20, 8.20.1, 8.20.2, 8.20.3, 8.20.4, 8.20.5, 8.20.6, 8.20.7, 8.20.8, 8.20.9, 8.21, 8.22, 8.22.1, 8.22.2, 8.22.3

Link to Product Website: https://www.atlassian.com/

软件类型: Bug Tracking Software

已发布BaseTemp漏洞0day今天修正CTICVE
2022-08-104.34.1Atlassian Jira Server/Jira Data Center TeamManagement.jspa 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-36801
2022-08-014.74.5Atlassian JIRA Server/Data Center Velocity Template 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.01CVE-2022-36799
2022-06-306.46.2Atlassian Jira Server/Jira Data Center Mobile Plugin 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-26135
2022-04-217.37.0Atlassian JIRA Server/Data Center Seraph 弱身份验证$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-0540
2022-03-084.74.5Atlassian JIRA Server/Data Center Email Template 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-43944
2022-02-282.42.3Atlassian JIRA Server/Data Center hierarchyConfiguration 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-43945
2022-02-154.34.1Atlassian JIRA Server/Data Center Thread Contention/CPU Monitoring Service ViewInstrumentation.jspa 跨网站请求伪造$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-43953
2022-02-154.34.1Atlassian JIRA Server/Data Center RestoreDefaults.jspa 跨网站请求伪造$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-43952
2022-02-154.34.1Atlassian JIRA Server/Data Center Jira-importers-plugin CsvFieldMappingsPage.jspa 跨网站请求伪造$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-43941
2022-01-064.74.5Atlassian JIRA Server/Data Center Email Template Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-43947
2022-01-056.36.0Atlassian JIRA Server/Data Center Filter Subscription EditSubscription.jspa 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-43946
2022-01-043.53.4Atlassian JIRA Server/Data Center Endpoint custom 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-43942
2021-12-087.37.0Atlassian JIRA Server/Data Center Roles Settings roles 弱身份验证$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-41311
2021-12-087.37.0Atlassian JIRA Server/Data Center Service Management Project resource 弱身份验证$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41309
2021-11-037.47.2Atlassian JIRA Server/Data Center Jira Service Management Project ViewCollectors 弱身份验证$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41312
2021-11-024.84.7Atlassian JIRA Server/Data Center Associated Project AssociatedProjectsForCustomField.jspa 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41310
2021-11-015.35.2Atlassian JIRA Server/Data Center Email Batch Confirguation ConfigureBatching!default.jspa 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41313
2021-10-264.84.7Atlassian JIRA Server/Data Center Error Message ImporterFinishedPage.jspa 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41304
2021-10-266.46.2Atlassian JIRA Server/Data Center File Replication Setting ReplicationSettings!default.jspa 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41308
2021-10-267.47.2Atlassian JIRA Server/Data Center Private Project 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41307
2021-10-265.95.8Atlassian JIRA Server/Data Center Private Project 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-41306
2021-10-267.47.2Atlassian JIRA Server/Data Center Project 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-41305
2021-10-215.85.7Atlassian JIRA Server/Data Center JQL Endpoint 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-39127
2021-10-216.16.1Atlassian JIRA Server/Data Center Referer 跨网站请求伪造$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-39126
2021-09-164.74.5Atlassian JIRA Server/Data Center Service Management Addon 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-39128

92 更多条目未显示

更多条目由 Atlassian

Might our Artificial Intelligence support you?

Check our Alexa App!