Atlassian Jira Server 8.13.22

CPE Details

Atlassian Jira Server 8.13.22
atlassian
jira_server
8.13.22
2022-07-12
08h35 +00:00
2022-07-20
16h40 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:atlassian:jira_server:8.13.22:*:*:*:*:*:*:*

Informations

Vendor

atlassian

Product

jira_server

Version

8.13.22

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-36801 2022-08-10 02h20 +00:00 Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (RXSS) vulnerability in the TeamManagement.jspa endpoint. The affected versions are before version 8.20.8.
6.1
Medium
CVE-2021-41313 2021-11-01 03h05 +00:00 Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20.7.
4.3
Medium
CVE-2020-36232 2021-02-22 20h46 +00:00 The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it incorrectly obtained application base url information from the executing http request which could be attacker controlled.
5
Medium