Jira Server@8.9.0 Security Vulnerabilities and Issues — Jira Server@8.9.0 CVE List

Lucene search

AtlassianJira Server8.9.0

5 matches found

CVE•added 2020/07/01 2:15 a.m.•80 views

CVE-2020-4022

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a mixed multipart con...

6.1CVSS5.8AI score0.00405EPSS

CVE•added 2020/07/01 2:15 a.m.•80 views

CVE-2020-4025

The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site ...

4.8CVSS5AI score0.00335EPSS

CVE•added 2020/07/01 2:15 a.m.•75 views

CVE-2020-4024

5.4CVSS5.2AI score0.00327EPSS

CVE•added 2020/07/01 2:15 a.m.•70 views

CVE-2020-14168

The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.

5.9CVSS5.5AI score0.00387EPSS

CVE•added 2020/07/01 2:15 a.m.•64 views

CVE-2020-14167

The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impact the application's availability via an Denial of Service (DoS) vulnerability.

7.5CVSS7.4AI score0.00915EPSS