Atlassian Jira Service Management Data Center
16 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-21589 | | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Ba | CRITICAL 9.3 | 99 % | KEV | |
| CVE-2026-21587 | 11.3.0 to 11.3.10 | This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Im | HIGH 7.1 | 0.4 % | ||
| CVE-2025-22157 | 10.5.0 ; 10.4.0 to 10.4.1 ; 10.3.0 to 10.3.4 ; … | This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core | HIGH 7.2 | 0.7 % | ||
| CVE-2023-22501 | before 5.3.3 ; before 5.4.2 ; before 5.5.1 ; … | An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate ano | CRITICAL 9.4 | 16 % | ||
| CVE-2022-36800 | unspecified – < 4.22.2 | Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission t | MEDIUM 4.3 | 0.7 % | ||
| CVE-2021-43959 | unspecified – < 4.13.20 ; 4.14.0 – < unspecified ; unspecified – < 4.20.8 ; … | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of | MEDIUM 5.7 | 0.7 % | ||
| CVE-2022-26137 | | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked w | HIGH 8.8 | 2.4 % | ||
| CVE-2022-26136 | | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third p | CRITICAL 9.8 | 5.7 % | ||
| CVE-2022-26135 | 4.0.0 – < unspecified ; unspecified – < 4.13.22 ; 4.14.0 – < unspecified ; … | A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the si | MEDIUM 6.5 | 72 % | ||
| CVE-2022-0540 | unspecified – < 4.13.18 ; 4.14.0 – < unspecified ; unspecified – < 4.20.6 ; … | A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP reques | CRITICAL 9.8 | 88 % | ||
| CVE-2021-43943 | unspecified – < 4.21.0 | Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privileges to inject arbitr | MEDIUM 4.8 | 0.4 % | ||
| CVE-2021-43948 | unspecified – < 4.21.0 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of priv | MEDIUM 4.3 | 0.8 % | ||
| CVE-2021-43950 | unspecified – < 4.21.0 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source con | MEDIUM 4.3 | 0.8 % | ||
| CVE-2021-43949 | unspecified – < 4.21.0 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects v | MEDIUM 4.3 | 0.8 % | ||
| CVE-2021-43951 | unspecified – < 4.21.0 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import con | MEDIUM 4.3 | 0.8 % | ||
| CVE-2020-36239 | 2.0.2 – < unspecified ; unspecified – < 4.5.16 ; 4.6.0 – < unspecified ; … | Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 b | CRITICAL 9.8 | 50 % |