Known vulnerabilities in Jira Software Data Center - page 7

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 27
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Software Data Center Jira Software Data Center is affected by 152 known vulnerabilities: 3 critical, 16 high, 117 medium, 16 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589
CWE-444 Medium
No
No
9.4.15, 9.12.2 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410
CWE-502 Medium
No
No
9.4.18, 9.12.1 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794
CWE-749 Medium
No
No
8.20.28, 9.4.12, 9.11.3 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
8.20.28, 9.4.12, 9.4.13, 9.11.3 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635
CWE-681 Medium
No
No
9.4.13, 9.12.24, 10.3.19, 11.3.2 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU77778 - Improper input validation
CVE-2022-29546
CWE-20 Low
No
No
9.4.18, 9.12.5, 9.14.0 28.06.2023 SB2022050443
SB20230719104
SB20231018117
and 10 more
#VU77777 - Improper input validation
CVE-2022-28366
CWE-20 Low
No
No
9.4.18, 9.12.5, 9.14.0 28.06.2023 SB2022042155
SB2023112475
SB2023121271
and 7 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
8.20.28, 9.4.12, 9.11.3 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436
CWE-674 Medium
No
No
9.4.16, 9.9.0 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU71108 - Out-of-bounds write
CVE-2022-45685
CWE-787 Medium
No
No
9.4.16, 9.9.0 11.01.2023 SB2023011159
SB2023011160
SB2023030328
and 29 more
#VU69674 - Resource exhaustion
CVE-2022-40150
CWE-400 Medium
No
No
9.4.16, 9.9.0 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 46 more
#VU68827 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42890
CWE-94 Low
No
No
9.4.16, 9.8.0 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 34 more
#VU68826 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-41704
CWE-94 High
No
No
9.4.16 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 14 more
#VU67585 - Server-Side Request Forgery (SSRF)
CVE-2022-40146
CWE-918 Medium
Available
No
9.4.16, 9.12.4 22.09.2022 SB2022092232
SB2023011763
SB2023011838
and 21 more
#VU65499 - Improper input validation
CVE-2021-31684
CWE-20 Medium
No
No
9.4.13 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU65495 - Improper input validation
CVE-2022-34169
CWE-20 High
Available
No
9.8.0 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU65486 - Improper input validation
CVE-2022-24839
CWE-20 Medium
No
No
9.4.18, 9.12.5, 9.14.0 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
8.20.28, 9.4.12, 9.11.3 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877
CWE-502 Medium
No
No
8.20.28, 9.4.12, 9.11.3 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649
CWE-611 Medium
No
No
9.4.13 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more


Showing elements 121 - 140 out of 152