CVE-2019-11583 json
The issue searching component in Jira before version 8.1.0 allows remote attackers to deny access to Jira service via denial of service vul…
published 2019-06-26 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-3253
- cvss
- 6.5
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.5%
- EPSS 1.5% chance of exploitation in 30 days, percentile 73%
- public exploits
- 0
- none known
Summary
The issue searching component in Jira before version 8.1.0 allows remote attackers to deny access to Jira service via denial of service vulnerability in issue search when ordering by "Epic Name".
Patch / fix
- Atlassian Jira 8.1.0
Exploit prediction
1.47% chance of exploitation in the next 30 days, higher than 73% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 6.5 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:N/I:N/A:P |
Affected products
- Atlassian Jira
References
-
jira.atlassian.com
/browse/JSWSERVER-20111
issue-tracking, vendor-advisory
-
securityfocus.com
/bid/108901
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2019-11583
- NVD CVE-2019-11583
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.