# Atlassian Jira


- [CVE-2020-14172](https://insights.sbomify.com/CVE-2020-14172/): Deserialization in Jira Server (critical 9.8)
- [CVE-2019-20409](https://insights.sbomify.com/CVE-2019-20409/): Code injection in Jira Server (critical 9.8)
- [CVE-2017-5983](https://insights.sbomify.com/CVE-2017-5983/): Deserialization in n/a (critical 9.8)
- [CVE-2012-2926](https://insights.sbomify.com/CVE-2012-2926/): XML external entity in n/a (critical 9.1)
- [CVE-2010-1165](https://insights.sbomify.com/CVE-2010-1165/): Code injection in n/a (critical 9.0)
- [CVE-2017-18113](https://insights.sbomify.com/CVE-2017-18113/): Code injection in Jira Data Center (high 8.8)
- [CVE-2016-4319](https://insights.sbomify.com/CVE-2016-4319/): Cross-site request forgery in Atlassian JIRA Server before 7.1.9 (high 8.8)
- [CVE-2019-8443](https://insights.sbomify.com/CVE-2019-8443/): Auth bypass in Jira (high 8.1)
- [CVE-2021-41312](https://insights.sbomify.com/CVE-2021-41312/): Auth bypass in Jira Data Center (high 7.5)
- [CVE-2021-41305](https://insights.sbomify.com/CVE-2021-41305/): Information disclosure in Jira Data Center (high 7.5)
- [CVE-2021-41306](https://insights.sbomify.com/CVE-2021-41306/): Information disclosure in Jira Data Center (high 7.5)
- [CVE-2021-41307](https://insights.sbomify.com/CVE-2021-41307/): Information disclosure in Jira Data Center (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/atlassian/jira/