3.6.3

DATE	CVE	VULNERABILITY TITLE	RISK
2021-09-01	CVE-2021-39115	Code Injection vulnerability in Atlassian Jira Service Desk Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands via a Server_Side Template Injection vulnerability in the Email Template feature. network low complexity atlassian CWE-94 critical	9.0
2020-07-01	CVE-2020-14166	Cross-site Scripting vulnerability in Atlassian Jira Service Desk The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file. network atlassian CWE-79	3.5