Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Atlassian Jira Data Center, Jira Server 8.13.6, 8.16.1 and 2 more versions Clear all filters
TI-2021-08032 CVE-2021-26080 · GHSA-hccg-5m3q-4vwv

Cross-site scripting in Atlassian Jira Server

Priority LOW 30

EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScrip…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01292 Published 2021-06-07 Fixed in 8.5.14, 8.13.6 +1 CWE-79
TI-2021-08030 CVE-2021-26078 · GHSA-5fqv-3jfx-5p64

Cross-site scripting in Atlassian Jira Server

Priority LOW 34

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04034 Published 2021-06-07 Fixed in 8.5.14, 8.13.6 +1 CWE-79