Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-36289

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.888
EPSS Ranking 99.5%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
Products affected by CVE-2020-36289


Contact Us

Shodan ® - All rights reserved