8.19.0

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-01	CVE-2021-41313	Unspecified vulnerability in Atlassian Jira Server Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. network low complexity atlassian	4.3
2021-10-26	CVE-2021-41304	Cross-site Scripting vulnerability in Atlassian products Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message. network low complexity atlassian CWE-79	6.1
2021-09-16	CVE-2021-39128	Code Injection vulnerability in Atlassian Jira Data Center and Jira Server Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers with JIRA Administrators access to execute arbitrary Java code via a server-side template injection vulnerability in the Email Template feature. network low complexity atlassian CWE-94	7.2