According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is potentially affected by multiple vulnerabilities:

 - Atlassian Jira contains a flaw that allows a reflected cross-site scripting (XSS) attack. This flaw exists because the issue collector does not properly sanitize input to error messages for custom fields before returning it to users. This may allow a context-dependent attacker to create a specially crafted request that executes arbitrary script code in a user's browser session within the trust relationship between their browser and the server. (CVE-2018-5230)

 - Atlassian Jira contains a flaw in the ForgotLoginDetails resource that is triggered during the handling of a specially crafted request. This may allow a remote attacker to cause a denial of service. (CVE-2018-5231)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is potentially affected by multiple vulnerabilities:

  - Atlassian JIRA contains a flaw that allows a reflected     cross-site scripting (XSS) attack. This flaw exists because     the issue collector does not properly sanitize input to     error messages for custom fields before returning it to users.     This may allow a context-dependent attacker to create a     specially crafted request that executes arbitrary script code     in a user's browser session within the trust relationship     between their browser and the server. (CVE-2018-5230)   
  - Atlassian JIRA contains a flaw in the ForgotLoginDetails     resource that is triggered during the handling of a specially     crafted request. This may allow a remote attacker to cause     a denial of service. (CVE-2018-5231)

ID	Name	Product	Family	Published	Updated	Severity
112625	Atlassian Jira 7.7.x < 7.7.4 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	10/27/2020	3/14/2023	high
112626	Atlassian Jira < 7.6.6 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	10/27/2020	3/14/2023	high
112623	Atlassian Jira 7.9.x < 7.9.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	10/27/2020	3/14/2023	high
112624	Atlassian Jira 7.8.x < 7.8.4 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	10/27/2020	3/14/2023	high
110125	Atlassian JIRA 7.6.5 / 7.7.x < 7.7.4 / 7.8.x < 7.8.4 / 7.9.x < 7.9.2 Multiple Vulnerabilities (SB18-141)	Nessus	CGI abuses	5/25/2018	6/5/2024	medium

Detections

Analytics

Plugins Search

high

high

high

high

medium