CVE-2020-14179

5.3 mediumEPSS 76%

Medium (5.3) in atlassian. EPSS 76% chance of exploitation in the next 30 days.

Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint. The affected versions are before version 8.5.8, and from version 8.6.0 before 8.11.1.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 76% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
Published: 2020-09-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:jira_data_center
atlassian:jira_server

References

https://jira.atlassian.com/browse/JRASERVER-71536
https://jira.atlassian.com/browse/JRASERVER-71536

Check your stack JSON