8.3.5

DATE	CVE	VULNERABILITY TITLE	RISK
2019-09-11	CVE-2019-14997	Unspecified vulnerability in Atlassian Jira Server The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an information expose through caching vulnerability when Jira is configured with a reverse Proxy and or a load balancer with caching or a CDN. network low complexity atlassian	4.3
2019-09-11	CVE-2019-14995	Missing Authorization vulnerability in Atlassian Jira Server The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and if an issue key is valid via a missing permissions check. network low complexity atlassian CWE-862	5.3