CVE-2021-39115 - CVE House
Back to Database
Status published Unknown CVE-2021-39115

Affected versions of Atlassian Jira Service Management Server and Data...

Vulnerability Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands via a Server_Side Template Injection vulnerability in the Email Template feature. The affected versions are before version 4.13.9, and from version 4.14.0 before 4.18.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-39115

Credits & Attribution

No credits recorded in the NVD database.

References

More from Atlassian

View All →
CVE-2025-22178
Jira Align is vulnerable to an authorization issue. A low-privilege...
Medium 5.3
CVE-2025-22177
Jira Align is vulnerable to an authorization issue. A low-privilege...
Medium 5.3
CVE-2025-22176
Jira Align is vulnerable to an authorization issue. A low-privilege...
Medium 5.3
CVE-2025-22175
Jira Align is vulnerable to an authorization issue. A low-privilege...
Medium 5.3
CVE-2025-22174
Jira Align is vulnerable to an authorization issue. A low-privilege...
Medium 5.3

Affected Vendor

Affected Software

Jira Service Desk Server, Jira Service Desk Data Center
Vulnerable Versions:
unspecified, 4.14.0

Timeline

Official Publish: September 1st, 2021
Last Modified: October 11th, 2024
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-96

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.