Medium severity5.9NVD Advisory· Published Jul 1, 2020· Updated Jun 17, 2026

CVE-2020-14168

Description

The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Jira
cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Range: <7.13.14
Atlassian/Jira Data Center
cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Range: >=8.5.0,<8.5.5
Atlassian/Jira Server
cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*
Range: >=8.5.0,<8.5.5
Atlassian/Jira Software Data Center
cpe:2.3:a:atlassian:jira_software_data_center:*:*:*:*:*:*:*:*
Range: <7.13.14
Atlassian/Crowd Data Center and Serverllm-fuzzy2 versions
<7.13.16, 8.5.0 to <8.5.7, 8.8.0 to <8.8.2, 8.9.0 to <8.9.1+ 1 more
- (no CPE)range: <7.13.16, 8.5.0 to <8.5.7, 8.8.0 to <8.8.2, 8.9.0 to <8.9.1
- (no CPE)range: unspecified

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2020-14168

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions