CVE-2021-26082

MEDIUM 5.4CVE-2021-26082 · Published 20/07/2021 · updated 17/06/2026

In short

CVE-2021-26082 is a MEDIUM (CVSS 5.4) vulnerability affecting data center (atlassian), jira (atlassian), jira data center (atlassian).
Chance of exploitation in the next 30 days (EPSS): 1.00%, higher than 62.8% of all vulnerabilities.
Fix: update to 8.5.14, 8.17.0, 8.13.6 or later.

Package	Affected versions	Patched versions
data center atlassian	`< 8.5.14`	`8.5.14`
jira atlassian	`< 8.5.14`	`8.5.14`
jira data center atlassian	`≥ 8.14.0, < 8.17.0≥ 8.6.0, < 8.13.6`	`8.17.08.13.6`
jira server atlassian	`≥ 8.14.0, < 8.17.0≥ 8.6.0, < 8.13.6`	`8.17.08.13.6`

Description

The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability.

References

jira.atlassian.com/browse/JRASERVER-72393 · Patch

More vulnerabilities in data center

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

data center

atlassian

< 8.5.14

8.5.14

jira

atlassian

< 8.5.14

8.5.14

jira data center

atlassian

≥ 8.14.0, < 8.17.0≥ 8.6.0, < 8.13.6

8.17.08.13.6

jira server

atlassian

≥ 8.14.0, < 8.17.0≥ 8.6.0, < 8.13.6

8.17.08.13.6

More vulnerabilities in data center

See all →