Vulnerabilities > Atlassian > Jira Service Management > 4.17.1

DATE CVE VULNERABILITY TITLE RISK
2022-01-10 CVE-2021-43951 Information Exposure vulnerability in Atlassian Jira Service Management
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import configuration details via an Information Disclosure vulnerability in the Create Object type mapping feature.
network
low complexity
atlassian CWE-200
4.3
2021-09-01 CVE-2021-39115 Code Injection vulnerability in Atlassian Jira Service Desk
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands via a Server_Side Template Injection vulnerability in the Email Template feature.
network
low complexity
atlassian CWE-94
7.2