Known vulnerabilities in Jira Software Data Center - page 4

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 27
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Software Data Center Jira Software Data Center is affected by 152 known vulnerabilities: 3 critical, 16 high, 117 medium, 16 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121159 - Resource exhaustion
CVE-2025-15284
CWE-400 Medium
No
No
10.3.15 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 38 more
#VU120878 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-49735
CWE-22 High
No
No
11.2.1 02.01.2026 SB2023113066
SB2026010213
SB2026010216
#VU116130 - Improper input validation
CVE-2025-9288
CWE-20 Medium
No
No
10.3.16, 11.2.1, 11.3.0 26.09.2025 SB2025092616
SB2025092618
SB2025092620
and 17 more
#VU115762 - Improper input validation
CVE-2025-9287
CWE-20 Medium
No
No
10.3.16, 11.2.1, 11.3.0 18.09.2025 SB2025091827
SB2025091828
SB2025091830
and 12 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249
CWE-693 Medium
No
No
11.2.0 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248
CWE-693 Medium
No
No
11.2.0 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754
CWE-770 Medium
Available
No
10.3.13, 11.2.1, 11.3.0 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988
CWE-611 Medium
Available
No
9.12.30, 10.3.13, 11.2.0 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU114026 - Resource exhaustion
CVE-2025-55163
CWE-400 Medium
No
No
9.12.28 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU112274 - Improper input validation
CVE-2025-52434
CWE-20 Medium
No
No
9.12.26, 10.3.9, 11.0.0 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 32 more
#VU111162 - Resource exhaustion
CVE-2025-48976
CWE-400 Medium
Available
No
9.12.26, 10.3.10, 10.7.3, 11.2.0 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152
CWE-918 Medium
Available
No
10.3.13 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 42 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538
CWE-185 Medium
No
No
10.3.16 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU82314 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2021-39227
CWE-1321 Critical
No
No
10.3.14, 11.3.0 24.10.2023 SB2023102413
SB2025121549
SB2026010215
#VU71109 - Out-of-bounds write
CVE-2022-45693
CWE-787 Medium
No
No
9.12.29 11.01.2023 SB2023011159
SB2023011160
SB2023013112
and 45 more
#VU69942 - Incorrect Regular Expression
CVE-2022-3517
CWE-185 Medium
No
No
10.3.14 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 48 more
#VU57967 - Improper input validation
CVE-2021-3807
CWE-20 Medium
No
No
10.3.16, 11.2.1 05.11.2021 SB2021110513
SB2021112603
SB2022042257
and 51 more
#VU41989 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8203
CWE-94 Medium
No
No
10.3.12, 11.1.0 10.08.2020 SB2020071548
SB2020122111
SB2021042308
and 31 more
#VU28582 - Improper input validation
CVE-2016-1181
CWE-20 High
No
No
11.2.1, 11.3.0 04.06.2020 SB20200114164
SB20200114165
SB2020071619
and 11 more
#VU2803 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-1182
CWE-79 Low
No
No
11.2.1 30.11.-0001 SB2016040703
SB2023013040
SB2024042318
and 5 more


Showing elements 61 - 80 out of 152