There are 25 active vulnerabilities with severity 3,4 on JIRA application server need to be closed

[Hesham Alzamil]

Dear Expert,

we plan to move jira from http to https. and we face this issue need to be closed first. There are 25 active vulnerabilities with severity 3,4 on JIRA application server need to be closed. kindly, FYS & advice please..

[Daniel Ebers]

Hi Hesham,

welcome to the Atlassian Community!

Closing vulnerabilities is always a good idea. From your posting I read there are plenty vulnerabilities in your installation - which version are you running?

An update to a newer version might make sense. Please check if you can update:
https://confluence.atlassian.com/jirasoftware/jira-software-release-notes-776821069.html

For updates a specific check list and how to are available, please kindly check:
https://confluence.atlassian.com/adminjiraserver/upgrading-jira-applications-938846936.html

Cheers,
Daniel