CVE-2020-14164

CVE-2020-14164: vulnerability in Atlassian Jira Server and Data Center

Published · Updated

Follow this CVE+ Monitor Jira Server and Data Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
The WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows remote attackers to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by pasting javascript code into the editor field.
Affected products
Atlassian · Jira Server and Data Center
Related CVEs — Atlassian Jira Server and Data Center

In the same product, most dangerous first.

CVE-2019-11581CRITICALCVE-2019-11581EPSS 84.6%KEVCVE-2020-14167—CVE-2020-14167EPSS 2.1%CVE-2020-14168—CVE-2020-14168EPSS 1.7%CVE-2020-4029—CVE-2020-4029EPSS 1.6%CVE-2019-20105—CVE-2019-20105EPSS 1.5%CVE-2019-20106—CVE-2019-20106EPSS 1.1%