VULNERABILITY INTELLIGENCE

CVE-2021-26078

CVSS score6.1 MEDIUM

EPSS probability4.03%

CISA KEVNot currently listed

Published2021-06-07

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability.

Weakness classification

nvd@nist.gov: CWE-79

Primary references

security@atlassian.com — Exploit, Third Party Advisory, VDB Entry
security@atlassian.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory