According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is 7.x greater than or equal to 7.6, 8.x prior to 8.5.4, or 8.6.x prior to 8.6.2. It is, therefore, affected by multiple vulnerabilities:

  - An input-validation flaw exists related to the     VerifySmtpServerConnection!add.jspa component that     allows cross-site request forgery attacks.
    (CVE-2019-20098)

  - An input-validation flaw exists related to the     VerifyPopServerConnection!add.jspa component that     allows cross-site request forgery attacks.
    (CVE-2019-20099)

CVE-2019-20099

medium

Tenable Plugins

medium