CVE-2021-43943

CVE-2021-43943: vulnerability in Atlassian Jira Service Management Server

Published · Updated

Follow this CVE+ Monitor Jira Service Management Data Center+ Monitor Jira Service Management Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privileges to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the "Object Schema" field of /secure/admin/InsightDefaultCustomFieldConfig.jspa. The affected versions are before version 4.21.0.
Affected products
Atlassian · Jira Service Management Data CenterAtlassian · Jira Service Management Server
Related CVEs — Atlassian Jira Service Management Server

In the same product, most dangerous first.

CVE-2026-21589CRITICALCVE-2026-21589EPSS 99.7%KEVCVE-2022-0540CRITICALCVE-2022-0540EPSS 88.1%CVE-2022-26135MEDIUMCVE-2022-26135EPSS 71.6%CVE-2020-36239CRITICALCVE-2020-36239EPSS 49.8%CVE-2023-22501CRITICALCVE-2023-22501EPSS 15.5%CVE-2022-26136CRITICALCVE-2022-26136EPSS 5.7%