Jetbrains vulnerabilities, page 4
696 vulnerabilities
Known vulnerabilities in Jetbrains products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 42 products.
CVE-2021-37547jetbrainsteamcity
EPSS score0.71%
In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.CVE-2021-37541jetbrainshubEPSS score0.55%
In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.CVE-2021-37545jetbrainsteamcityEPSS score0.87%
In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made.CVE-2021-37552jetbrainsyoutrackEPSS score0.62%
In JetBrains YouTrack before 2021.2.17925, stored XSS was possible.CVE-2021-37542jetbrainsteamcityEPSS score0.62%
In JetBrains TeamCity before 2020.2.3, XSS was possible.CVE-2021-37543jetbrainsrubymineEPSS score1.42%
In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects.CVE-2021-37553jetbrainsyoutrackEPSS score1.45%
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.CVE-2021-37546jetbrainsteamcityEPSS score0.55%
In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used.CVE-2021-43201jetbrainsteamcityEPSS score0.71%
In JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an already deleted project.CVE-2021-43197jetbrainsteamcityEPSS score0.59%
In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.CVE-2021-43191jetbrainsyoutrack_mobileEPSS score0.71%
JetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS.CVE-2021-43199jetbrainsteamcityEPSS score0.68%
In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.CVE-2021-43188jetbrainsyoutrack_mobileEPSS score0.76%
In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete.CVE-2021-43192jetbrainsyoutrack_mobileEPSS score0.71%
In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.CVE-2021-43198jetbrainsteamcityEPSS score0.46%
In JetBrains TeamCity before 2021.1.2, stored XSS is possible.CVE-2021-43184jetbrainsyoutrackEPSS score0.66%
In JetBrains YouTrack before 2021.3.21051, stored XSS is possible.CVE-2021-43194jetbrainsteamcityEPSS score0.86%
In JetBrains TeamCity before 2021.1.2, user enumeration was possible.CVE-2021-43189jetbrainsyoutrack_mobileEPSS score0.76%
In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete.CVE-2021-43186jetbrainsyoutrackEPSS score0.56%
JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS.CVE-2021-43185jetbrainsyoutrackEPSS score2.01%
JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection.