CVE-2020-14165

CVE-2020-14165: vulnerability in Atlassian Jira Server and Data Center

Published · Updated

Follow this CVE+ Monitor Jira Server and Data Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability.
Affected products
Atlassian · Jira Server and Data Center
Related CVEs — Atlassian Jira Server and Data Center

In the same product, most dangerous first.

CVE-2019-11581CRITICALCVE-2019-11581EPSS 84.6%KEVCVE-2020-14167—CVE-2020-14167EPSS 2.1%CVE-2020-14168—CVE-2020-14168EPSS 1.7%CVE-2020-4029—CVE-2020-4029EPSS 1.6%CVE-2019-20105—CVE-2019-20105EPSS 1.5%CVE-2019-20106—CVE-2019-20106EPSS 1.1%