Medium severity4.8NVD Advisory· Published Feb 15, 2021· Updated Jun 17, 2026

CVE-2020-36234

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the Screens Modal view. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.15.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Crowd Data Center and Serverllm-fuzzy
Range: <8.5.11, 8.6.0-<8.13.3, 8.14.0-<8.15.0
Atlassian/Jira Servercpe-rescue2 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*range: >=8.6.0,<8.13.3
Atlassian/Jira Core Data Centercpe-rescue
Range: unspecified
Atlassian/Data Center
cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*
Range: <8.5.11
Atlassian/Jira
cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Range: <8.5.11
Atlassian/Jira Data Center
cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Range: >=8.14.0,<8.15.0

cvss	0.312
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2020-36234

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions