Known vulnerabilities in Jira Software Data Center - page 5
Vendor:
Atlassian
Software:
Jira Software Data Center
Software CPE:
cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
152
Public exploits:
27
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
11.3.10
9.12.38
11.3.9
10.3.24
11.3.8
9.12.37
10.3.23
9.12.36
11.3.6
11.3.7
10.3.21
10.3.22
9.12.35
10.3.20
11.3.5
9.12.33
9.12.32
9.12.31
9.12.34
10.3.19
11.3.4
10.3.17
10.3.18
11.3.3
11.3.1
11.3.2
10.3.16
10.3.15
9.12.29
10.3.14
11.3.0
11.2.1
10.3.13
9.12.30
11.2.0
11.1.1
11.1.0
10.3.12
10.3.11
10.3.10
9.12.28
9.12.27
9.12.26
10.3.9
10.7.3
11.0.1
11.0.0
9.12.25
9.12.24
9.12.23
9.12.21
10.7.2
10.3.8
10.7.1
10.3.7
10.3.6
10.6.1
10.6.0
9.12.20
10.3.5
10.5.1
9.12.22
9.12.19
9.12.18
10.5.0
10.4.1
10.3.4
10.3.3
10.4.0
10.3.2
10.3.1
10.3.0
10.2.1
10.2.0
9.12.17
9.12.16
10.1.2
10.1.1
10.0.1
10.0.0
9.17.5
9.17.4
9.17.3
9.17.2
9.16.1
9.12.15
9.12.14
9.12.13
9.4.28
9.4.27
9.4.26
9.4.25
9.4.24
9.4.23
9.4.22
9.12.12
9.12.11
9.12.10
9.12.9
9.17.1
9.17.0
9.12.8
9.4.21
9.16.0
9.15.2
9.15.1
9.12.7
9.4.20
9.12.6
9.4.19
9.15.0
9.14.1
9.12.5
9.4.18
9.14.0
9.12.4
9.4.17
9.12.3
9.4.16
9.13.1
9.13.0
9.12.2
9.4.15
8.20.30
9.12.1
8.20.29
9.4.14
9.4.13
9.12.0
9.11.3
9.4.12
8.20.28
9.11.2
9.4.11
8.20.27
9.10.2
9.11.1
8.20.26
9.4.10
9.7.2
9.11.0
9.9.2
9.8.2
9.10.1
8.20.25
9.4.9
9.10.0
9.9.1
8.20.24
9.4.8
9.4.7
8.20.23
9.9.0
9.8.1
9.4.6
8.20.22
9.8.0
9.7.1
9.7.0
9.4.5
9.4.4
8.20.21
8.20.20
8.20.19
9.4.3
8.20.18
9.6.0
9.5.1
9.4.2
9.3.3
9.5.0
9.4.1
9.3.2
9.2.1
8.20.17
8.20.16
9.4.0
8.20.15
9.3.1
8.20.14
8.13.27
9.3.0
9.2.0
8.20.13
8.20.12
8.13.26
8.13.25
9.1.1
9.1.0
8.22.6
8.22.5
8.20.11
8.13.24
9.0.0
8.22.4
8.20.10
8.13.22
8.22.3
8.22.2
8.20.9
8.20.8
8.13.21
8.13.20
8.22.1
8.22.0
8.21.1
8.21.0
8.20.7
8.20.6
8.20.5
8.20.4
8.20.3
8.20.2
8.20.1
8.20.0
8.19.1
8.19.0
8.18.2
8.13.19
8.13.18
8.13.17
8.13.16
8.13.15
8.13.14
8.13.13
8.13.12
8.13.11
8.13.10
8.5.19
8.5.18
8.18.1
8.18.0
8.17.1
8.17.0
8.16.2
8.16.1
8.16.0
8.15.1
8.15.0
8.14.1
8.14.0
8.13.9
8.13.8
8.13.7
8.13.6
8.13.5
8.13.4
8.13.3
8.13.2
8.13.1
8.13.0
8.12.3
8.12.2
8.12.1
8.12.0
8.11.1
8.11.0
8.10.1
8.10.0
8.9.1
8.9.0
8.8.1
8.8.0
8.7.1
8.7.0
8.6.1
8.6.0
8.5.17
8.5.16
8.5.15
8.5.14
8.5.13
8.5.12
8.5.11
8.5.10
8.5.9
8.5.8
8.5.7
8.5.6
8.5.5
8.5.4
8.5.3
8.5.2
8.5.1
8.5.0
8.4.3
8.4.2
8.4.1
8.4.0
8.3.5
8.3.4
8.3.3
8.3.2
8.3.1
8.3.0
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.3
8.1.2
8.1.1
8.1.0
8.0.3
8.0.2
8.0.0
7.13.18
7.13.17
7.13.16
7.13.15
7.13.14
7.13.13
7.13.12
7.13.11
7.13.9
7.13.8
7.13.6
7.13.5
7.13.4
7.13.3
7.13.2
7.13.1
7.13.0
7.12.3
7.12.2
7.12.1
7.12.0
7.11.2
7.11.1
7.11.0
7.10.2
7.10.1
7.10.0
7.9.2
7.9.0
7.8.4
7.8.2
7.8.1
7.8.0
7.7.4
7.7.2
7.7.1
7.7.0
7.6.17
7.6.16
7.6.15
7.6.14
7.6.13
7.6.12
7.6.11
7.6.10
7.6.9
7.6.8
7.6.7
7.6.6
7.6.4
7.6.3
7.6.2
7.6.1
7.6.0
7.5.4
7.5.3
7.5.2
7.5.1
7.5.0
7.4.6
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.15
7.2.14
7.2.13
7.2.12
7.2.11
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.1.10
7.1.9
7.1.8
7.1.7
7.1.6
7.1.5
7.1.4
7.1.3
7.1.2
7.1.1
7.1.0
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.15
6.3.14
6.3.13
6.3.12
6.3.11
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.3.0
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
Vulnerabilities (152)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117434 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-22167 |
CWE-22 | Medium | 9.12.28, 10.3.12, 11.1.0 | 21.10.2025 |
SB2025102173 SB20251023134 |
||
| #VU114761 - Resource exhaustion CVE-2025-58057 |
CWE-400 | Medium | 9.12.28, 10.3.11, 11.1.0 | 03.09.2025 |
SB2025090340 SB2025090949 SB2025101530 and 45 more |
||
| #VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-58056 |
CWE-444 | Medium | 9.12.28, 10.3.11, 11.1.0 | 03.09.2025 |
SB2025090340 SB2025090949 SB20251008161 and 38 more |
||
| #VU114346 - Command injection CVE-2025-7962 |
CWE-77 | Medium | 9.12.27, 10.3.10, 11.0.1 | 21.08.2025 |
SB2025082145 SB2025082146 SB2025082147 and 54 more |
||
| #VU114024 - Resource exhaustion CVE-2025-48989 |
CWE-400 | Medium | 9.12.28, 10.3.10, 11.0.1 | 13.08.2025 |
SB2025081375 SB2025081376 SB20250820127 and 49 more |
||
| #VU112276 - Resource exhaustion CVE-2025-53506 |
CWE-400 | Medium | 9.12.26, 10.3.9, 10.7.3, 11.0.1 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 41 more |
||
| #VU112275 - Resource Management Errors CVE-2025-52520 |
CWE-399 | Medium | 9.12.26, 10.3.9, 10.7.3, 11.0.1 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 42 more |
||
| #VU111161 - Resource exhaustion CVE-2025-48988 |
CWE-400 | Medium | 9.12.25, 10.3.8, 10.7.2 | 16.06.2025 |
SB2025061634 SB2025061927 SB20250620145 and 40 more |
||
| #VU111159 - Improper Protection of Alternate Path CVE-2025-49125 |
CWE-424 | Medium | 9.12.25, 10.3.8, 10.7.2 | 16.06.2025 |
SB2025061634 SB2025061927 SB20250620145 and 35 more |
||
| #VU109959 - Improper Handling of Case Sensitivity CVE-2025-46701 |
CWE-178 | Low | 9.12.24, 10.3.7, 10.7.1 | 30.05.2025 |
SB2025053002 SB2025061335 SB2025062313 and 22 more |
||
| #VU109587 - Improper Privilege Management CVE-2025-22157 |
CWE-269 | Medium | 9.12.20, 10.3.5, 10.5.1, 10.6.0 | 21.05.2025 |
SB2025052196 SB2025052197 |
||
| #VU109240 - Configuration CVE-2025-27820 |
CWE-16 | Medium | 9.12.24, 10.3.8, 10.7.2 | 16.05.2025 |
SB2025051604 SB2025060628 SB2025063009 and 10 more |
||
| #VU107996 - Error Handling CVE-2025-31650 |
CWE-388 | Medium | 10.3.6, 10.6.1 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 38 more |
||
| #VU106926 - Resource Management Errors CVE-2024-57699 |
CWE-399 | Medium | 9.12.22, 10.3.5, 10.5.1 | 03.04.2025 |
SB2025040317 SB2025040325 SB2025040326 and 63 more |
||
| #VU105881 - Security Features CVE-2025-22228 |
CWE-254 | Low | 9.12.24, 10.3.7, 10.7.1 | 19.03.2025 |
SB2025031966 SB2025040327 SB2025061733 and 24 more |
||
| #VU103770 - Improper input validation CVE-2025-24970 |
CWE-20 | Medium | 9.12.20, 10.3.5, 10.5.1, 10.6.0 | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 88 more |
||
| #VU100095 - Memory corruption CVE-2024-47072 |
CWE-119 | Medium | 9.12.19, 10.3.4, 10.5.0 | 07.11.2024 |
SB20241107102 SB20241115126 SB2024112531 and 36 more |
||
| #VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819 |
CWE-22 | Medium | 9.12.18 | 17.10.2024 |
SB2024101781 SB2024112849 SB2024120331 and 54 more |
||
| #VU97574 - Uncontrolled Recursion CVE-2024-7254 |
CWE-674 | Medium | 9.4.28, 9.12.15, 9.17.4, 10.1.2 | 19.09.2024 |
SB2024091904 SB2024100103 SB2024101050 and 90 more |
||
| #VU61721 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-33813 |
CWE-611 | Medium | 9.12.22 | 29.03.2022 |
SB2021061628 SB2022032929 SB2022032930 and 39 more |
Showing elements 81 - 100 out of 152