Atlassian Jira vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
82 matching records
- High8.0MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Check this weekEPSS 11.50%Mar 10, 2026
- High8.2MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Check this weekEPSS 13.00%Mar 10, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticatedCheck if you run itEPSS 0.41%Feb 25, 2026
- Medium4.1Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the JCheck this weekEPSS 18.00%Dec 24, 2025
- Medium4.3Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as commentsCheck this weekEPSS 19.00%Dec 24, 2025
- High8.3Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost Jira plugin versions <=4.4.0 fail to enfoCheck if you run itEPSS 0.26%Dec 22, 2025
- Medium4.3Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploading artifactCheck if you run itEPSS 0.34%Dec 10, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.18%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.19%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- High8.7This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server.Check if you run itEPSS 0.50%Oct 22, 2025
- Medium5.4Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting (XSS) via the Jira fullName parameter.Check if you run itEPSS 0.23%Jul 3, 2025
- Unknownrainbow_portal rainbow.zen Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.75%Jun 7, 2025
- High7.2This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 1Check if you run itEPSS 0.69%May 20, 2025
- Low3.0Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can request to contact upstream which allows an authenticated user to exfiCheck if you run itEPSS 0.29%Apr 16, 2025
- UnknownAtlassian Jira Server and Data Center Authentication Bypass VulnerabilityPatch nowKEVEPSS 88.06%Mar 30, 2024
- UnknownAtlassian Jira Server and Data Center Incorrect AuthorizationPatch nowKEVEPSS 17.55%Jan 22, 2024
- UnknownAtlassian Jira Server and Data Center Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 94.45%Dec 6, 2023
- UnknownJira CachingResourceDownloadRewriteRule class Security BypassPatch nowKEVEPSS 59.83%Nov 17, 2023