Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Atlassian Jira Service Management Data Center, Jira Service Management Server 4.21.0 Clear all filters
TI-2021-19711 CVE-2021-43949 · GHSA-6v7j-h4h2-4p86

Information disclosure in Atlassian Jira Service Management Server

Priority LOW 22

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00836 Published 2022-01-10 Fixed in 4.21.0 CWE-200
TI-2021-19713 CVE-2021-43951 · GHSA-h599-8w7q-3j7j

Information disclosure in Atlassian Jira Service Management Server

Priority LOW 22

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import configuration details via an Information Disclosure vulnerability in the Create Obj…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00836 Published 2022-01-10 Fixed in 4.21.0 CWE-200