High severity7.5NVD Advisory· Published Jul 1, 2020· Updated Jun 17, 2026

CVE-2020-14167

Description

The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impact the application's availability via an Denial of Service (DoS) vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Jira
cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Range: <7.13.14
Atlassian/Jira Data Center
cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Range: >=8.5.0,<8.5.5
Atlassian/Jira Server
cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*
Range: >=8.5.0,<8.5.5
Atlassian/Jira Software Data Center
cpe:2.3:a:atlassian:jira_software_data_center:*:*:*:*:*:*:*:*
Range: <7.13.14
Atlassian/Crowd Data Center and Serverllm-fuzzy2 versions
<7.13.4, 8.5.0-<8.5.5, 8.8.0-<8.8.2, 8.9.0-<8.9.1+ 1 more
- (no CPE)range: <7.13.4, 8.5.0-<8.5.5, 8.8.0-<8.8.2, 8.9.0-<8.9.1
- (no CPE)range: unspecified

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2020-14167

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions