8.20.0

DATE	CVE	VULNERABILITY TITLE	RISK
2022-01-05	CVE-2021-43946	Unspecified vulnerability in Atlassian Jira Data Center Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator groups to filter subscriptions via a Broken Access Control vulnerability in the /secure/EditSubscription.jspa endpoint. network low complexity atlassian	6.5
2021-11-01	CVE-2021-41313	Unspecified vulnerability in Atlassian Jira Server Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. network low complexity atlassian	4.3
2021-10-26	CVE-2021-41304	Cross-site Scripting vulnerability in Atlassian products Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message. network low complexity atlassian CWE-79	6.1