Vulnerabilities > Atlassian > Jira Service Desk > 3.9.5
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-09-01 | CVE-2021-39115 | Code Injection vulnerability in Atlassian Jira Service Desk Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands via a Server_Side Template Injection vulnerability in the Email Template feature. | 9.0 |
2020-07-01 | CVE-2020-14166 | Cross-site Scripting vulnerability in Atlassian Jira Service Desk The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file. | 3.5 |