Filtered by vendor Atlassian Subscriptions
Filtered by product Jira Server Subscriptions
Total 142 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-18101 1 Atlassian 2 Jira, Jira Server 2024-11-21 6.5 Medium
Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attackers to run import operations and to determine if an internal service exists through missing permission checks.
CVE-2017-14594 1 Atlassian 2 Jira, Jira Server 2024-11-21 N/A
The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jqlQuery query parameter.