CVE-2021-26078
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 4.0%
from disclosure to weapon21 days
Published on NVDJun 7
1st PoC+21d
exploitation probability
4.0%top 10% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability.
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/50068unverifiedcve_referencepacketstormsecurity.com/files/163289/Atlassian-Jira-Server-Data-Center-8.16.0-Cross-Site-Scripting.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.