Known vulnerabilities in Jira Software Data Center - page 11

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 228
Public exploits: 30
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Software Data Center Jira Software Data Center is affected by 228 known vulnerabilities: 3 critical, 25 high, 172 medium, 28 low Critical High Medium Low

Vulnerabilities (228)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589
CWE-444 Medium
No
No
9.4.15, 9.12.2 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410
CWE-502 Medium
No
No
9.4.18, 9.12.1 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794
CWE-749 Medium
No
No
8.20.28, 9.4.12, 9.11.3 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
8.20.28, 9.4.12, 9.4.13, 9.11.3 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU77778 - Improper input validation
CVE-2022-29546
CWE-20 Low
No
No
9.4.18, 9.12.5, 9.14.0 28.06.2023 SB2022050443
SB20230719104
SB20231018117
and 10 more
#VU77777 - Improper input validation
CVE-2022-28366
CWE-20 Low
No
No
9.4.18, 9.12.5, 9.14.0 28.06.2023 SB2022042155
SB2023112475
SB2023121271
and 7 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
8.20.28, 9.4.12, 9.11.3 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
8.20.28, 9.4.12, 9.11.3 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68827 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42890
CWE-94 Low
No
No
9.4.16, 9.8.0 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 34 more
#VU68826 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-41704
CWE-94 High
No
No
9.4.16 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 14 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
8.20.28, 9.4.12, 9.11.3 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67585 - Server-Side Request Forgery (SSRF)
CVE-2022-40146
CWE-918 Medium
Available
No
9.4.16, 9.12.4 22.09.2022 SB2022092232
SB2023011763
SB2023011838
and 21 more
#VU65499 - Improper input validation
CVE-2021-31684
CWE-20 Medium
No
No
9.4.13 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU65495 - Improper input validation
CVE-2022-34169
CWE-20 High
Available
No
9.8.0 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU65486 - Improper input validation
CVE-2022-24839
CWE-20 Medium
No
No
9.4.18, 9.12.5, 9.14.0 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647
CWE-502 Medium
No
No
8.20.28, 9.4.19, 9.11.3 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
8.20.28, 9.4.12, 9.11.3 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877
CWE-502 Medium
No
No
8.20.28, 9.4.12, 9.11.3 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714
CWE-835 Medium
No
No
8.20.28, 9.4.12, 9.11.3 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649
CWE-611 Medium
No
No
9.4.13 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more


Showing elements 201 - 220 out of 228