Vulnerability index

Browse CVEs

366 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Jira HIGH 9.0

CVE-2010-1165

Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments…

Patch available

Fix from $1,950 2010-04-20

Jira MEDIUM 6.8

CVE-2008-6832

Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of uns…

No fix yet

Fix from $1,600 2009-06-08

Jira MEDIUM 6.8

CVE-2008-6531

The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted U…

Fix: 3.13.2+

Fix from $1,600 2009-03-26

Jira HIGH 7.5

CVE-2007-6619

The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows r…

Fix: after 3.12

Fix from $1,950 2008-01-03

Jira MEDIUM 5.0

CVE-2007-6618

JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified filter ID.

Fix: after 3.12

Fix from $1,600 2008-01-03

Jira MEDIUM 5.0

CVE-2006-3339

secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations o…

Mitigation only

Fix from $1,600 2006-07-03