Lucene search
Security-metrics-botATLASSIAN:JSDSERVER-6895HistoryJun 18, 2020 - 2:45 a.m.
XSS in API and Integrations - CVE-2020-14166
2020-06-1802:45:39
security-metrics-bot
jira.atlassian.com
19
0.002 Low
EPSS
Percentile
55.0%
Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in API and Integrations.
Affected versions:
- version < 4.10.0
Fixed versions:
- 4.10.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| jira service management server and data center | lt | 4.10.0 | |
| jira service management server and data center | le | 4.7.1 |
Related
atlassian
atlassian
XSS in API and Integrations - CVE-2020-14166
2020-06-18 02:45:39
prion
prion
Cross site scripting
2020-07-01 02:15:00
packetstorm
packetstorm
Atlassian Jira Service Desk 4.9.1 Cross Site Scripting
2021-04-07 00:00:00
cve
cve
CVE-2020-14166
2020-07-01 02:15:11
nvd
nvd
CVE-2020-14166
2020-07-01 02:15:11
cvelist
cvelist
CVE-2020-14166
2020-07-01 00:00:00
zdt
zdt
exploitdb
exploitdb
Atlassian Jira Service Desk 4.9.1 - Unrestricted File Upload to XSS
2021-04-07 00:00:00