Sploitus

91 exploited vulnerabilities in Jira

Showing 1–50 of 91, highest-scoring first

Vendors
Alt Linux, Almalinux, Astra Linux, Atlassian, Centos, Red Hat
With known exploits
91
Affected Postgresql Postgresql Jdbc Driver versions
< 42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2, 42.2.25, 42.3.2
Affected Apache log4j versions
≤ 1.2.17
Affected Unicode versions
< 14.0.0
Affected Atlassian Jira Server versions
< 7.6.14, 7.13.5, 8.0.3, 8.1.2, 8.2.3, 8.13.8, 8.20.6, 8.22.0
Affected Atlassian Jira Data Center versions
< 8.13.8, 8.20.6, 8.22.0
Affected Atlassian Jira Service Management versions
< 4.13.8, 4.13.18, 4.20.6, 4.22.0
Affected Vmware Spring Framework versions
< 5.2.20, 5.3.18
Affected Underscorejs Underscore versions
< 1.12.1, 1.13.0-2

Vulnerabilities with exploits

Highest CVSS first — 14 of these already have exploit code on Sploitus

CVE-2024-1597
CVSS 10.0 CRITICAL 2024-02-19FIX AVAILABLE
CVE-2022-23305 1 exploit
CVSS 10.0 CRITICAL 2022-01-10FIX AVAILABLE
Exploit for SQL Injection in Apache Log4J
CVE-2022-23307
CVSS 10.0 HIGH 2022-01-10FIX AVAILABLE
CVE-2022-21724
CVSS 10.0 CRITICAL 2022-02-02FIX AVAILABLE
CVE-2021-42574 3 exploits
CVSS 10.0 HIGH 2021-11-01
Exploit for Code Injection in UnicodeExploit for Code Injection in Unicode
CVE-2019-20330
CVSS 10.0 HIGH 2019-10-19FIX AVAILABLE
CVE-2019-11581 2 exploits
CVSS 10.0 CRITICAL 2019-07-15FIX AVAILABLE
Exploit for Injection in Atlassian Jira_ServerExploit for Injection in Atlassian Jira_Server
CVE-2022-0540 2 exploits
CVSS 9.8 CRITICAL 2022-04-20FIX AVAILABLE
Exploit for Improper Authentication in Atlassian Jira_Data_CenterExploit for Improper Authentication in Atlassian Jira_Data_Center
CVE-2022-22965 104 exploits
CVSS 9.8 CRITICAL 2020-10-29FIX AVAILABLE
Exploit for Code Injection in Vmware Spring_FrameworkExploit for Code Injection in Vmware Spring_Framework
CVE-2021-23358 2 exploits
CVSS 9.0 HIGH 2021-02-28FIX AVAILABLE
OX App Suite Cross Site Scripting / Third Party VulnerabilitiesExploit for Code Injection in Underscorejs Underscore
CVE-2021-29505 1 exploit
CVSS 9.0 HIGH 2021-05-14FIX AVAILABLE
XStream远程代码执行漏洞（CVE-2021-29505）
CVE-2022-23302
CVSS 8.8 HIGH 2022-01-10FIX AVAILABLE
CVE-2024-34750
CVSS 8.7 HIGH 2024-06-19FIX AVAILABLE
CVE-2026-27826
CVSS 8.2 HIGH 2026-02-27FIX AVAILABLE
CVE-2022-41966
CVSS 8.2 HIGH 2022-12-21FIX AVAILABLE
CVE-2022-42004
CVSS 8.2 HIGH 2022-10-02FIX AVAILABLE
CVE-2024-23672
CVSS 7.8 HIGH 2024-02-19FIX AVAILABLE
CVE-2023-39410
CVSS 7.8 HIGH 2023-09-29FIX AVAILABLE
CVE-2023-43642
CVSS 7.8 HIGH 2023-09-25FIX AVAILABLE
CVE-2023-44487 20 exploits
CVSS 7.8 HIGH 2023-01-11FIX AVAILABLE
Exploit for Uncontrolled Resource Consumption in Siemens Simatic_S7-1500_Cpu_1518F-4_Pn\/Dp_Mfp_FirmwareExploit for Uncontrolled Resource Consumption in Siemens Simatic_S7-1500_Cpu_1518F-4_Pn\/Dp_Mfp_Firmware
CVE-2023-1370
CVSS 7.8 HIGH 2023-03-13
CVE-2023-34453
CVSS 7.8 HIGH 2023-06-15FIX AVAILABLE
CVE-2023-34455
CVSS 7.8 HIGH 2023-06-15FIX AVAILABLE
CVE-2023-34454
CVSS 7.8 HIGH 2023-06-15FIX AVAILABLE
CVE-2022-24839
CVSS 7.8 HIGH 2022-04-11FIX AVAILABLE
CVE-2020-36518
CVSS 7.8 HIGH 2020-08-13FIX AVAILABLE
CVE-2022-29546
CVSS 7.8 HIGH 2022-04-25
CVE-2022-42003 1 exploit
CVSS 7.8 HIGH 2022-10-02FIX AVAILABLE
osv-java-poc
CVE-2022-45688 4 exploits
CVSS 7.8 HIGH 2022-12-13FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Alibaba FastjsonExploit for Out-of-bounds Write in Hutool
CVE-2022-3509
CVSS 7.8 HIGH 2022-09-29FIX AVAILABLE
CVE-2022-41704
CVSS 7.8 HIGH 2022-10-25FIX AVAILABLE
CVE-2022-42890
CVSS 7.8 HIGH 2022-10-25FIX AVAILABLE
CVE-2022-3171
CVSS 7.8 HIGH 2022-10-04
CVE-2022-34169 2 exploits
CVSS 7.8 HIGH 2022-07-04FIX AVAILABLE
Exploit for Incorrect Conversion between Numeric Types in Apache Xalan-JavaExploit for Incorrect Conversion between Numeric Types in Apache Xalan-Java
CVE-2021-46877
CVSS 7.8 HIGH 2021-12-20FIX AVAILABLE
CVE-2021-40690
CVSS 7.8 HIGH 2021-09-19FIX AVAILABLE
CVE-2021-28165
CVSS 7.8 HIGH 2021-04-01
CVE-2016-4055
CVSS 7.8 HIGH 2017-01-23FIX AVAILABLE
CVE-2022-25647
CVSS 7.7 HIGH 2022-05-01FIX AVAILABLE
CVE-2022-1940
CVSS 7.7 HIGH 2022-05-30FIX AVAILABLE
CVE-2021-4104 9 exploits
CVSS 7.6 HIGH 2021-12-10FIX AVAILABLE
runtime-exploit-guardExploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2019-11358 4 exploits
CVSS 7.6 HIGH 2019-03-25FIX AVAILABLE
Exploit for Cross-site Scripting in Jquery📄 jQuery 3.3.1 Cross Site Scripting
CVE-2024-21634
CVSS 7.5 HIGH 2024-01-03
CVE-2023-5072
CVSS 7.5 HIGH 2023-10-12FIX AVAILABLE
CVE-2023-1436
CVSS 7.5 HIGH 2023-03-16
CVE-2022-45685
CVSS 7.5 HIGH 2022-12-13FIX AVAILABLE
CVE-2022-40150
CVSS 7.5 HIGH 2022-09-16
CVE-2022-40149
CVSS 7.5 HIGH 2022-09-16
CVE-2022-40146 1 exploit
CVSS 7.5 HIGH 2022-09-22
Exploit for Server-Side Request Forgery in Apache Batik
CVE-2022-28366
CVSS 7.5 HIGH 2022-04-21FIX AVAILABLE