According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.15, 8.6.x < 8.13.7 or 8.14.x < 8.17.0. It is, therefore, affected by multiple vulnerabilities:

 - A Cross-Site Scripting (XSS) vulnerability in the CardLayoutConfigTable component. (CVE 2021-26079)

 - An information disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint allowing an unauthenticated user to enumerate users. (CVE-2020-36289)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
112815	Atlassian Jira 8.14.x < 8.17.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	7/2/2021	3/14/2023	medium
112813	Atlassian Jira < 8.5.15 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	7/2/2021	3/14/2023	medium
112814	Atlassian Jira 8.6.x < 8.13.7 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	7/2/2021	3/14/2023	medium

Detections

Analytics

Plugins Search

medium

medium

medium