Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Atlassian Jira Server and Data Center 8.5.5, 8.8.2 and 2 more versions Clear all filters
TI-2020-03515 CVE-2020-4024 · GHSA-h8h7-522c-qwmm

Cross-site scripting in Atlassian Jira Server and Data Center

Priority LOW 26

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00926 Published 2020-07-01 Fixed in 8.5.5, 8.8.2 +1 CWE-79
TI-2020-03513 CVE-2020-4022 · GHSA-49xr-3mhp-pp54

Cross-site scripting in Atlassian Jira Server and Data Center

Priority LOW 30

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01135 Published 2020-07-01 Fixed in 8.5.5, 8.8.2 +1 CWE-79