Atlassian
Monthly
Authenticated path traversal in the Jenkins Redpen - Pipeline Reporter for Jira plugin (1.054.v7b_9517b_6b_202 and earlier) allows a user holding Item/Configure permission to read files from the Jenkins controller workspace directory when the plugin uploads build artifacts to Jira. Because the plugin fails to correctly validate the workspace path, the file being attached to a Jira issue can be resolved outside the intended build workspace, exposing controller-side files to anyone who can configure a job. No public exploit code has been identified at time of analysis, there is no indication of active exploitation, and the EPSS score is low at 0.34% (26th percentile), so this is a moderate-to-low priority issue whose risk is driven mainly by the privileged permission required of the attacker.
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from the details pages without checking for permissions, which can lead to remote code execution. This vulnerability is fixed in 1.27.1.
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper authorization in Atlassian Jira Align allows a remote authenticated low-privilege user to access endpoints outside their intended role and read a limited amount of sensitive information, such as entries on the 'Why' page. Exploitation requires a valid low-privilege account (CVSS 4.0 PR:L), with no user interaction, and results only in low confidentiality impact; no public exploit code has been identified at time of analysis, and EPSS is 0.21% (10th percentile). This is a genuine but low-to-moderate priority authorization flaw, not an unauthenticated bypass and not confirmed in CISA KEV from the supplied data.
Authorization bypass in Atlassian Jira Align allows any authenticated low-privilege user to reach endpoints that should be restricted to higher-privileged roles, disclosing a small amount of sensitive information such as other teams' overview pages. The flaw is confirmed by CVSS 4.0 vector PR:L - it is not exploitable anonymously; an attacker must already hold a valid low-privilege Jira Align account, making insider or compromised-credential scenarios the realistic threat model, with no integrity or availability impact. Severity is low (5.3), no public exploit code or confirmed active exploitation has been identified, and EPSS is negligible at 0.21% (10th percentile).
Authenticated low-privilege users of Atlassian Jira Align can access restricted endpoints and disclose limited sensitive information, including audit log items, due to an improper authorization flaw (CWE-285). The flaw requires a valid low-privilege account (PR:L) and network access, with no user interaction or special configuration; it is not a pre-authentication bypass despite the 'Authentication Bypass' tag. No public exploit identified at time of analysis, EPSS is 0.21% (10th percentile), and the independent assessment rates this as a low-to-moderate priority issue with only limited confidentiality impact.
Jira Align's broken object-level authorization permits an authenticated low-privilege user to access or modify limited resources belonging to other users, such as another user's private checklist steps. The issue is rated CVSS 5.3 (CWE-285); the provided EPSS is 0.18% (6th percentile), and no public exploit identified at time of analysis. All Jira Align versions are presumed affected per the CPE entry, and exploitation requires a valid low-privilege account on the target instance.
Improper authorization in Atlassian Jira Align lets a low-privilege authenticated user reach endpoints that should be gated behind higher permissions, exposing a small amount of sensitive information - the vendor cites a low-level user viewing portfolio rooms without the required permission as a concrete case. According to the CVSS vector (PR:L), exploitation requires a valid low-privilege Jira Align account; the issue is not reachable by fully unauthenticated attackers, requires no user interaction or non-default configuration, and is limited to low confidentiality impact with no integrity or availability effect. There is no public exploit code identified and no CISA KEV listing, and the EPSS score of 0.21% (10th percentile) indicates a very low likelihood of exploitation attempts, consistent with an insider- or compromised-account-driven risk rather than an opportunistic remote attack.
Improper authorization in Atlassian Jira Align lets an authenticated low-privilege user reach endpoints that fail to enforce the required permission checks, exposing a small amount of sensitive data such as sprint information. The flaw is rated CVSS 4.0 base 5.3 (assessed CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N), reflecting limited confidentiality-only impact with no modification or disruption. Exploitation requires a valid low-privilege Jira Align account and knowledge of the affected endpoint paths; no public exploit identified at time of analysis and EPSS is low (0.21%, 10th percentile), with the issue not appearing in CISA KEV.
Authenticated low-privilege users of Atlassian Jira Align can reach application endpoints they are not authorized to use and read data such as external reports without holding the required permission, producing a limited disclosure of sensitive information. Exploitation requires an existing valid low-privilege account (PR:L) with network access, grants no privilege escalation or data modification, and is confined to low confidentiality impact, so this is a genuine-but-low-priority authorization flaw rather than a high-severity compromise. EPSS is 0.21% (10th percentile), no public exploit code has been identified at time of analysis, and there is no CISA KEV entry.
Improper authorization in Atlassian Jira Align's checklist feature lets any authenticated user with low privileges modify the private checklists belonging to other users. Exploitation requires a valid Jira Align account on the same tenant (PR:L in the assessed vector) and needs no victim interaction, but it is confined to unauthorized data modification - there is no confidentiality or availability impact, placing it firmly in the low-risk tier. The vendor's advisory is published under JIRAALIGN-8640, EPSS sits at just 0.19% (8th percentile), there is no CISA KEV listing, and no public exploit code has been identified at time of analysis.
Improper authorization in Atlassian Jira Align allows an authenticated low-privilege user to perform actions they are not entitled to by supplying a state-related parameter that belongs to a user who does hold the required privileges, effectively bypassing the per-user permission check (CWE-285). The assessed vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N confirms the attacker must hold a valid low-privilege account (PR:L, so not unauthenticated access), needs no victim interaction, and can achieve only a low-integrity impact with no confidentiality or availability loss. Risk is moderate rather than urgent: EPSS is 0.21% (10th percentile), there is no CISA KEV entry, no POC is referenced, and exploitation requires an already-provisioned account on the instance.
Missing per-endpoint authorization checks in Atlassian Jira Align allow any authenticated low-privilege user to reach endpoints and perform actions - such as subscribing to an item or object - that are reserved for higher-privilege roles, disclosing a small amount of sensitive information. Exploitation requires a valid low-privilege Jira Align account (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N), produces no integrity or availability impact, and no public exploit code has been identified at time of analysis. With an EPSS score of 0.18% (6th percentile), this is a genuinely low-priority, low-real-risk issue despite being a valid flaw.
Improper authorization checks in Atlassian Jira Align allow an authenticated low-privilege user to reach endpoints beyond their intended permissions, disclosing small amounts of other users' sensitive data - for example, reading the steps of another user's private checklist. Exploitation requires a valid tenant account (PR:L per the CVSS vector), is remote and low-complexity with no user interaction, and results in only limited confidentiality impact with no integrity, availability, or scope change. Risk is further tempered by a very low EPSS of 0.21% (9th percentile) and no public exploit code or CISA KEV listing identified at time of analysis.
Authenticated path traversal in Atlassian Jira Data Center and Server 9.12.x before 9.12.28, 10.3.x before 10.3.12, and 11.0.0 allows a low-privilege user to write arbitrary files to any filesystem path writable by the Jira JVM process, which can lead to configuration tampering or code execution depending on the permissions of the service account. No public exploit identified at time of analysis and no CISA KEV entry is associated; EPSS is 0.50% (41st percentile), so this is a mid-tier priority requiring authenticated access rather than an emergency remote unauthenticated issue.
A denial-of-service vulnerability in Atlassian Confluence Data Center and Confluence Server allows an authenticated, low-privilege user to exhaust server resources and make the instance unavailable to its intended users, with no user interaction required. The flaw was introduced in Confluence 2.0 and affects all releases below the fixed versions 8.5.25 (8.5 branch), 9.2.7 (9.2 branch), and 10.0.2 (10.0 branch); the CVSS 4.0 score of 8.3 reflects high availability impact at both the vulnerable and subsequent system level. EPSS is low at roughly 0.51% (41st percentile) and no public exploit code has been identified at time of analysis, but the authentication requirement is the primary limiting factor - risk is elevated for instances that permit self-registration, host large populations of low-trust accounts, or are otherwise exposed to broad user bases. This is a genuine but moderate-priority availability risk, not a critical emergency.
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Remote code execution in XWiki Pro Macros versions 1.0 through 1.26.4 lets any authenticated user who holds edit permission on a single wiki page break out of the panel macro's 'classes' parameter and inject arbitrary XWiki 2.1 syntax, which the renderer then evaluates with server-side privileges. The flaw is missing output escaping (CWE-95) in XWiki/Macros/Panel.xml, and because injected content executes with the rendering context's rights the assessed impact is scope-changed with high confidentiality, integrity and availability loss (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). No public exploit code or CISA KEV entry was identified at time of analysis, but EPSS sits at 3.35% (87th percentile) and a vendor patch (1.26.5) plus public GitHub commit are available, so exposure should be closed quickly on collaborative wikis where edit rights are broadly granted.
Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal. Rated low severity (CVSS 2.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptions via API call to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription details without via. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the user does not have. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Server-Side Request Forgery in Apwide Golive 10.2.0 for Jira allows an attacker to abuse the plugin's test webhook function to induce the server to issue HTTP requests to arbitrary internal or external hosts. The vulnerability carries a scope-changed CVSS vector (S:C), meaning requests escape the plugin's trust boundary and can reach internal network resources invisible to the attacker. With an EPSS of 0.29% (20th percentile) and no active exploitation confirmed in CISA KEV, real-world risk is currently low, but the SSRF primitive could enable internal service enumeration or SSRF-chained attacks against cloud metadata endpoints on Jira-hosting infrastructure.
Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting (XSS) via the Jira fullName parameter.
In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 10.4.0, and 10.5.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.
Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can request to contact upstream which allows an authenticated user to exfiltrate data from an. Rated low severity (CVSS 3.0), this vulnerability is remotely exploitable. No vendor patch available.
The XWiki JIRA extension provides various integration points between XWiki and JIRA (macros, UI, CKEditor plugin). Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) before v4.1.69-dc allows attackers with Administrator. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
@codidact/qpixel is a Q&A-based community knowledge-sharing software. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
File upload logic in Apache Struts is flawed. Rated critical severity (CVSS 9.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center and Server for Windows installations. Rated medium severity (CVSS 6.4). No vendor patch available.
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to easily brute-force the 2FA PIN via the. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.1, 8.8.0, and. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo Data Center and Server. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Confluence allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Jira plugin versions shipped with Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to escape user-controlled outputs when. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data Center. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Mattermost Jira Plugin handling subscriptions fails to check the security level of an incoming issue or limit it based on the user who created the subscription resulting in registered users on Jira. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira connection in Mattermost only by viewing the. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An issue was discovered in savignano S/Notify before 4.0.2 for Confluence. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An issue was discovered in savignano S/Notify before 4.0.2 for Jira. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Kantega SAML SSO OIDC Kerberos Single Sign-on apps before 6.20.0 for Atlassian products allow XSS if SAML POST Binding is enabled. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
On unix-like systems, the temporary directory is shared between all user. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamboo Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.
Local File Inclusion vulnerability in Midori-global Better PDF Exporter for Jira Server and Jira Data Center v.10.3.0 and before allows an attacker to view arbitrary files and cause other impacts via. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automatically. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity.
matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required.
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.22 before 1.24.0. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Authenticated path traversal in the Jenkins Redpen - Pipeline Reporter for Jira plugin (1.054.v7b_9517b_6b_202 and earlier) allows a user holding Item/Configure permission to read files from the Jenkins controller workspace directory when the plugin uploads build artifacts to Jira. Because the plugin fails to correctly validate the workspace path, the file being attached to a Jira issue can be resolved outside the intended build workspace, exposing controller-side files to anyone who can configure a job. No public exploit code has been identified at time of analysis, there is no indication of active exploitation, and the EPSS score is low at 0.34% (26th percentile), so this is a moderate-to-low priority issue whose risk is driven mainly by the privileged permission required of the attacker.
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from the details pages without checking for permissions, which can lead to remote code execution. This vulnerability is fixed in 1.27.1.
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper authorization in Atlassian Jira Align allows a remote authenticated low-privilege user to access endpoints outside their intended role and read a limited amount of sensitive information, such as entries on the 'Why' page. Exploitation requires a valid low-privilege account (CVSS 4.0 PR:L), with no user interaction, and results only in low confidentiality impact; no public exploit code has been identified at time of analysis, and EPSS is 0.21% (10th percentile). This is a genuine but low-to-moderate priority authorization flaw, not an unauthenticated bypass and not confirmed in CISA KEV from the supplied data.
Authorization bypass in Atlassian Jira Align allows any authenticated low-privilege user to reach endpoints that should be restricted to higher-privileged roles, disclosing a small amount of sensitive information such as other teams' overview pages. The flaw is confirmed by CVSS 4.0 vector PR:L - it is not exploitable anonymously; an attacker must already hold a valid low-privilege Jira Align account, making insider or compromised-credential scenarios the realistic threat model, with no integrity or availability impact. Severity is low (5.3), no public exploit code or confirmed active exploitation has been identified, and EPSS is negligible at 0.21% (10th percentile).
Authenticated low-privilege users of Atlassian Jira Align can access restricted endpoints and disclose limited sensitive information, including audit log items, due to an improper authorization flaw (CWE-285). The flaw requires a valid low-privilege account (PR:L) and network access, with no user interaction or special configuration; it is not a pre-authentication bypass despite the 'Authentication Bypass' tag. No public exploit identified at time of analysis, EPSS is 0.21% (10th percentile), and the independent assessment rates this as a low-to-moderate priority issue with only limited confidentiality impact.
Jira Align's broken object-level authorization permits an authenticated low-privilege user to access or modify limited resources belonging to other users, such as another user's private checklist steps. The issue is rated CVSS 5.3 (CWE-285); the provided EPSS is 0.18% (6th percentile), and no public exploit identified at time of analysis. All Jira Align versions are presumed affected per the CPE entry, and exploitation requires a valid low-privilege account on the target instance.
Improper authorization in Atlassian Jira Align lets a low-privilege authenticated user reach endpoints that should be gated behind higher permissions, exposing a small amount of sensitive information - the vendor cites a low-level user viewing portfolio rooms without the required permission as a concrete case. According to the CVSS vector (PR:L), exploitation requires a valid low-privilege Jira Align account; the issue is not reachable by fully unauthenticated attackers, requires no user interaction or non-default configuration, and is limited to low confidentiality impact with no integrity or availability effect. There is no public exploit code identified and no CISA KEV listing, and the EPSS score of 0.21% (10th percentile) indicates a very low likelihood of exploitation attempts, consistent with an insider- or compromised-account-driven risk rather than an opportunistic remote attack.
Improper authorization in Atlassian Jira Align lets an authenticated low-privilege user reach endpoints that fail to enforce the required permission checks, exposing a small amount of sensitive data such as sprint information. The flaw is rated CVSS 4.0 base 5.3 (assessed CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N), reflecting limited confidentiality-only impact with no modification or disruption. Exploitation requires a valid low-privilege Jira Align account and knowledge of the affected endpoint paths; no public exploit identified at time of analysis and EPSS is low (0.21%, 10th percentile), with the issue not appearing in CISA KEV.
Authenticated low-privilege users of Atlassian Jira Align can reach application endpoints they are not authorized to use and read data such as external reports without holding the required permission, producing a limited disclosure of sensitive information. Exploitation requires an existing valid low-privilege account (PR:L) with network access, grants no privilege escalation or data modification, and is confined to low confidentiality impact, so this is a genuine-but-low-priority authorization flaw rather than a high-severity compromise. EPSS is 0.21% (10th percentile), no public exploit code has been identified at time of analysis, and there is no CISA KEV entry.
Improper authorization in Atlassian Jira Align's checklist feature lets any authenticated user with low privileges modify the private checklists belonging to other users. Exploitation requires a valid Jira Align account on the same tenant (PR:L in the assessed vector) and needs no victim interaction, but it is confined to unauthorized data modification - there is no confidentiality or availability impact, placing it firmly in the low-risk tier. The vendor's advisory is published under JIRAALIGN-8640, EPSS sits at just 0.19% (8th percentile), there is no CISA KEV listing, and no public exploit code has been identified at time of analysis.
Improper authorization in Atlassian Jira Align allows an authenticated low-privilege user to perform actions they are not entitled to by supplying a state-related parameter that belongs to a user who does hold the required privileges, effectively bypassing the per-user permission check (CWE-285). The assessed vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N confirms the attacker must hold a valid low-privilege account (PR:L, so not unauthenticated access), needs no victim interaction, and can achieve only a low-integrity impact with no confidentiality or availability loss. Risk is moderate rather than urgent: EPSS is 0.21% (10th percentile), there is no CISA KEV entry, no POC is referenced, and exploitation requires an already-provisioned account on the instance.
Missing per-endpoint authorization checks in Atlassian Jira Align allow any authenticated low-privilege user to reach endpoints and perform actions - such as subscribing to an item or object - that are reserved for higher-privilege roles, disclosing a small amount of sensitive information. Exploitation requires a valid low-privilege Jira Align account (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N), produces no integrity or availability impact, and no public exploit code has been identified at time of analysis. With an EPSS score of 0.18% (6th percentile), this is a genuinely low-priority, low-real-risk issue despite being a valid flaw.
Improper authorization checks in Atlassian Jira Align allow an authenticated low-privilege user to reach endpoints beyond their intended permissions, disclosing small amounts of other users' sensitive data - for example, reading the steps of another user's private checklist. Exploitation requires a valid tenant account (PR:L per the CVSS vector), is remote and low-complexity with no user interaction, and results in only limited confidentiality impact with no integrity, availability, or scope change. Risk is further tempered by a very low EPSS of 0.21% (9th percentile) and no public exploit code or CISA KEV listing identified at time of analysis.
Authenticated path traversal in Atlassian Jira Data Center and Server 9.12.x before 9.12.28, 10.3.x before 10.3.12, and 11.0.0 allows a low-privilege user to write arbitrary files to any filesystem path writable by the Jira JVM process, which can lead to configuration tampering or code execution depending on the permissions of the service account. No public exploit identified at time of analysis and no CISA KEV entry is associated; EPSS is 0.50% (41st percentile), so this is a mid-tier priority requiring authenticated access rather than an emergency remote unauthenticated issue.
A denial-of-service vulnerability in Atlassian Confluence Data Center and Confluence Server allows an authenticated, low-privilege user to exhaust server resources and make the instance unavailable to its intended users, with no user interaction required. The flaw was introduced in Confluence 2.0 and affects all releases below the fixed versions 8.5.25 (8.5 branch), 9.2.7 (9.2 branch), and 10.0.2 (10.0 branch); the CVSS 4.0 score of 8.3 reflects high availability impact at both the vulnerable and subsequent system level. EPSS is low at roughly 0.51% (41st percentile) and no public exploit code has been identified at time of analysis, but the authentication requirement is the primary limiting factor - risk is elevated for instances that permit self-registration, host large populations of low-trust accounts, or are otherwise exposed to broad user bases. This is a genuine but moderate-priority availability risk, not a critical emergency.
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Remote code execution in XWiki Pro Macros versions 1.0 through 1.26.4 lets any authenticated user who holds edit permission on a single wiki page break out of the panel macro's 'classes' parameter and inject arbitrary XWiki 2.1 syntax, which the renderer then evaluates with server-side privileges. The flaw is missing output escaping (CWE-95) in XWiki/Macros/Panel.xml, and because injected content executes with the rendering context's rights the assessed impact is scope-changed with high confidentiality, integrity and availability loss (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). No public exploit code or CISA KEV entry was identified at time of analysis, but EPSS sits at 3.35% (87th percentile) and a vendor patch (1.26.5) plus public GitHub commit are available, so exposure should be closed quickly on collaborative wikis where edit rights are broadly granted.
Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal. Rated low severity (CVSS 2.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptions via API call to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription details without via. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the user does not have. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Server-Side Request Forgery in Apwide Golive 10.2.0 for Jira allows an attacker to abuse the plugin's test webhook function to induce the server to issue HTTP requests to arbitrary internal or external hosts. The vulnerability carries a scope-changed CVSS vector (S:C), meaning requests escape the plugin's trust boundary and can reach internal network resources invisible to the attacker. With an EPSS of 0.29% (20th percentile) and no active exploitation confirmed in CISA KEV, real-world risk is currently low, but the SSRF primitive could enable internal service enumeration or SSRF-chained attacks against cloud metadata endpoints on Jira-hosting infrastructure.
Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting (XSS) via the Jira fullName parameter.
In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 10.4.0, and 10.5.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.
Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can request to contact upstream which allows an authenticated user to exfiltrate data from an. Rated low severity (CVSS 3.0), this vulnerability is remotely exploitable. No vendor patch available.
The XWiki JIRA extension provides various integration points between XWiki and JIRA (macros, UI, CKEditor plugin). Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) before v4.1.69-dc allows attackers with Administrator. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
@codidact/qpixel is a Q&A-based community knowledge-sharing software. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
File upload logic in Apache Struts is flawed. Rated critical severity (CVSS 9.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center and Server for Windows installations. Rated medium severity (CVSS 6.4). No vendor patch available.
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to easily brute-force the 2FA PIN via the. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.1, 8.8.0, and. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo Data Center and Server. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Confluence allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Mattermost Jira plugin versions shipped with Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to escape user-controlled outputs when. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data Center. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Mattermost Jira Plugin handling subscriptions fails to check the security level of an incoming issue or limit it based on the user who created the subscription resulting in registered users on Jira. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira connection in Mattermost only by viewing the. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An issue was discovered in savignano S/Notify before 4.0.2 for Confluence. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An issue was discovered in savignano S/Notify before 4.0.2 for Jira. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Kantega SAML SSO OIDC Kerberos Single Sign-on apps before 6.20.0 for Atlassian products allow XSS if SAML POST Binding is enabled. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
On unix-like systems, the temporary directory is shared between all user. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamboo Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.
Local File Inclusion vulnerability in Midori-global Better PDF Exporter for Jira Server and Jira Data Center v.10.3.0 and before allows an attacker to view arbitrary files and cause other impacts via. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automatically. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity.
matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required.
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.22 before 1.24.0. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.