Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium4.3Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploa…EPSS 0.3%Dec 10, 2025
- Unknownrainbow_portal rainbow.zen Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVJun 7, 2025
- UnknownAtlassian Jira Server and Data Center Authentication Bypass VulnerabilityKEVMar 30, 2024
- UnknownAtlassian Jira Server and Data Center Incorrect AuthorizationKEVJan 22, 2024
- UnknownAtlassian Jira Server and Data Center Server-Side Request Forgery (SSRF)KEVDec 6, 2023
- UnknownJira CachingResourceDownloadRewriteRule class Security BypassKEVNov 17, 2023
- Unknownnetic group_export Missing AuthorizationKEVNov 13, 2023
- Unknownstagil stagil_navigation Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVJul 18, 2023
- Unknownstagil stagil_navigation Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVJul 18, 2023
- Critical9.8gajira-create GitHub action vulnerable to arbitrary code executionEPSS 2.9%Oct 7, 2022
- Medium5.3Atlassian Jira Server and Data Center Path Traversal VulnerabilityKEVEPSS 100.0%Aug 15, 2021
- Critical9.8Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityKEVEPSS 84.6%Aug 9, 2019
- UnknownAtlassian Jira Server and Data Center Improper Control of Generation of Code ('Code Injection')KEVApr 20, 2010
- UnknownAtlassian Jira Server and Data Center Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVApr 20, 2010
39 records · page 2 of 2
PreviousNext