Atlassian Jira vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
13 matching records
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsPatch nowKEVEPSS 99.48%Oct 5, 2026
- Unknownrainbow_portal rainbow.zen Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.75%Jun 7, 2025
- UnknownAtlassian Jira Server and Data Center Authentication Bypass VulnerabilityPatch nowKEVEPSS 88.06%Mar 30, 2024
- UnknownAtlassian Jira Server and Data Center Incorrect AuthorizationPatch nowKEVEPSS 17.55%Jan 22, 2024
- UnknownAtlassian Jira Server and Data Center Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 94.45%Dec 6, 2023
- UnknownJira CachingResourceDownloadRewriteRule class Security BypassPatch nowKEVEPSS 59.83%Nov 17, 2023
- Unknownnetic group_export Missing AuthorizationPatch nowKEVEPSS 25.68%Nov 13, 2023
- Unknownstagil stagil_navigation Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 11.71%Jul 18, 2023
- Unknownstagil stagil_navigation Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 47.20%Jul 18, 2023
- Medium5.3Atlassian Jira Server and Data Center Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%Aug 15, 2021
- Critical9.8Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 84.62%Aug 9, 2019
- UnknownAtlassian Jira Server and Data Center Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.44%Apr 20, 2010
- UnknownAtlassian Jira Server and Data Center Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.23%Apr 20, 2010
Sort
13 records