Vulnerabilities > Atlassian > Jira Data Center > 8.19.1

DATE CVE VULNERABILITY TITLE RISK
2021-11-01 CVE-2021-41313 Unspecified vulnerability in Atlassian Jira Server
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint.
network
low complexity
atlassian
4.3
2021-10-26 CVE-2021-41304 Cross-site Scripting vulnerability in Atlassian products
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message.
network
low complexity
atlassian CWE-79
6.1