Known vulnerabilities in Jira Software Data Center

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 228
Public exploits: 30
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Software Data Center Jira Software Data Center is affected by 228 known vulnerabilities: 3 critical, 25 high, 172 medium, 28 low Critical High Medium Low

Vulnerabilities (228)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153326 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-21589
CWE-22 Medium
No
No
9.12.40, 10.3.26, 11.3.12 06.10.2026 SB2026100635
SB2026100636
SB2026100637
and 5 more
#VU150181 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-44728
CWE-94 High
No
No
10.3.23, 11.3.11 16.09.2026 SB2026091631
SB2026091642
SB2026091643
#VU140707 - Resource exhaustion
CVE-2026-69152
CWE-400 Medium
No
No
10.3.25, 11.3.11 01.08.2026 SB2026080125
SB2026081044
SB2026083142
and 9 more
#VU140706 - Allocation of Resources Without Limits or Throttling
CVE-2026-14257
CWE-770 Medium
No
No
10.3.25, 11.3.11 01.08.2026 SB2026080124
SB2026083142
SB2026083146
and 10 more
#VU140701 - Interpretation Conflict
CVE-2026-18446
CWE-436 Medium
No
No
10.3.25, 11.3.1 01.08.2026 SB2026080119
SB2026083172
SB2026083174
and 6 more
#VU139375 - Uncontrolled Recursion
CVE-2026-73566
CWE-674 Medium
No
No
10.3.18, 11.3.11 26.07.2026 SB2026072605
SB2026091637
SB2026091642
and 2 more
#VU139252 - Resource exhaustion
CVE-2026-73507
CWE-400 Medium
No
No
9.12.38, 10.3.24, 11.3.11 24.07.2026 SB2026072404
SB2026091634
SB2026091638
and 3 more
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512
CWE-502 High
No
No
10.3.25, 11.3.11 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 36 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513
CWE-184 High
No
No
10.3.25, 11.3.11 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU139081 - Interpretation Conflict
CVE-2026-16221
CWE-436 Medium
No
No
10.3.25, 11.3.1 22.07.2026 SB2026072226
SB2026083172
SB2026083174
and 6 more
#VU138918 - Interpretation Conflict
CVE-2026-13676
CWE-436 High
No
No
10.3.25, 11.3.1 21.07.2026 SB2026072195
SB2026072237
SB2026072238
and 12 more
#VU136918 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-67320
CWE-1321 Low
No
No
10.3.24, 11.3.8 06.07.2026 SB2026070641
SB2026083172
SB2026083174
and 4 more
#VU136867 - Resource exhaustion
CVE-2026-59869
CWE-400 Medium
No
No
10.3.24, 11.3.11 03.07.2026 SB2026070344
SB20260731138
SB2026083174
and 7 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276
CWE-670 Low
No
No
9.12.37, 10.3.23, 11.3.8 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 11 more
#VU135865 - Improper Certificate Validation
CVE-2026-53434
CWE-295 Medium
No
No
9.12.37, 10.3.23, 11.3.8 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 11 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404
CWE-670 Medium
No
No
10.3.23, 11.3.8 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 13 more
#VU135794 - Inefficient Algorithmic Complexity
CVE-2026-59880
CWE-407 Medium
No
No
10.3.24 29.06.2026 SB2026062999
SB2026080424
SB2026091638
and 6 more
#VU135792 - Integer overflow
CVE-2026-59879
CWE-190 Medium
No
No
10.3.24 29.06.2026 SB2026062999
SB2026080424
SB2026091638
and 6 more
#VU131920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47761
CWE-79 Low
No
No
10.3.25 20.05.2026 SB2026052050
SB2026091642
SB2026091643
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175
CWE-94 Medium
No
No
10.3.24, 11.3.11 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 46 more


Showing elements 1 - 20 out of 228