CVE Watch—

CVE-2021-26086

Atlassian Jira Server and Data Center Path Traversal Vulnerability

CVSS

—

Sin CVSS

EPSS

100.0%

p100

KEV

SÍ

12 nov 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 días100.0%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Atlassian / Jira Server and Data Center

Vulnerabilidad

Atlassian Jira Server and Data Center Path Traversal Vulnerability

Añadido a KEV

12 nov 2024

Remediar antes de

3 dic 2024

Uso conocido en ransomware

Descripción resumida

Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://jira.atlassian.com/browse/JRASERVER-72695 ; https://nvd.nist.gov/vuln/detail/CVE-2021-26086

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2019-11581—

99.7%

KEV—80Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability—