Lucene search

K
AtlassianJira Data Center

4 matches found

CVE
CVE
added 2021/09/16 6:15 a.m.76 views

CVE-2021-39128

Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers with JIRA Administrators access to execute arbitrary Java code via a server-side template injection vulnerability in the Email Template feature. The affected versions of Jira Ser...

7.2CVSS7.3AI score0.00712EPSS
CVE
CVE
added 2021/09/08 2:15 a.m.73 views

CVE-2021-39122

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability in the /rest/api/2/search endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14....

5.3CVSS5.1AI score0.00482EPSS
CVE
CVE
added 2021/09/08 12:15 a.m.70 views

CVE-2021-39116

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the GIF Image Reader component. The affected versions are before version 8.13.14, and from version 8.14.0 before 8.19.0.

5.5CVSS5.4AI score0.0054EPSS
CVE
CVE
added 2021/09/08 2:15 a.m.67 views

CVE-2021-39121

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure vulnerability in the /rest/api/latest/projectvalidate/key endpoint. The affected versions are before version 8.5.18, from vers...

4.3CVSS4.7AI score0.004EPSS