QID 106196

QID 106196: EOL/Obsolete Software: Atlassian JIRA 7.4.x to 7.13.x Detected

JIRA is a proprietary issue-tracking product, developed by Atlassian. It provides bug tracking, issue tracking, and project management functions.

7.4.x: 29 Jun 2019
7.5.x: 06 Sep 2019
7.6.x: 14 Nov 2019
7.7.x: 11 Jan 2020
7.8.x: 20 Feb 2020
7.9.x: 09 Apr 2020
7.10.x: 29 May 2020
7.11.x: 11 Jul 2020
7.12.x: 27 Aug 2020
7.13.x.28 Nov 2020

QID Detection Logic:
This unauthenticated QID detects vulnerable versions of Atlassian JIRA based on the information reported via the administration web page.

The system is at high risk of being exposed to security vulnerabilities. Since Atlassian no longer provides updates, obsolete software is more vulnerable to attacks.

CVSS V3 rated as Critical - 9.8 severity.

CVSS V2 rated as Critical - 10 severity.

Solution

Customers are advised to upgrade to the latest supported version of Atlassian JIRA. Refer to Atlassian End of Life Policy to obtain more information.

Vendor References

Atlassian Support End of Life Policy - confluence.atlassian.com/support/atlassian-support-end-of-life-policy-201851003.html

CVEs related to QID 106196

Software Advisories

Advisory ID	Software	Component	Link

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].