CVE-2020-14168
CVE-2020-14168
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
01 Jul 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.
Affected products
Atlassian · Jira Server and Data CenterWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →