Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-72706
HistoryAug 16, 2021 - 3:40 a.m.

Jira is affected by Tomcat CVE-2020-13943

2021-08-1603:40:01
security-metrics-bot
jira.atlassian.com
66

0.001 Low

EPSS

Percentile

42.1%

Affected versions of Atlassian Jira Server and Data Centerย used versions of Apache Tomcat that were vulnerable to [CVE-2020-13943|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13943].

The affected versions of Jira Server and Data Center are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.15.0.

Affected versions:

  • version < 8.5.14
  • 8.6.0 โ‰ค version < 8.13.6
  • 8.14.0 โ‰ค version < 8.15.0

Fixed versions:

  • 8.5.14
  • 8.13.6
  • 8.15.0