Known vulnerabilities in Jira Software Data Center - page 8
Vendor:
Atlassian
Software:
Jira Software Data Center
Software CPE:
cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
152
Public exploits:
27
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
11.3.10
9.12.38
11.3.9
10.3.24
11.3.8
9.12.37
10.3.23
9.12.36
11.3.6
11.3.7
10.3.21
10.3.22
9.12.35
10.3.20
11.3.5
9.12.33
9.12.32
9.12.31
9.12.34
10.3.19
11.3.4
10.3.17
10.3.18
11.3.3
11.3.1
11.3.2
10.3.16
10.3.15
9.12.29
10.3.14
11.3.0
11.2.1
10.3.13
9.12.30
11.2.0
11.1.1
11.1.0
10.3.12
10.3.11
10.3.10
9.12.28
9.12.27
9.12.26
10.3.9
10.7.3
11.0.1
11.0.0
9.12.25
9.12.24
9.12.23
9.12.21
10.7.2
10.3.8
10.7.1
10.3.7
10.3.6
10.6.1
10.6.0
9.12.20
10.3.5
10.5.1
9.12.22
9.12.19
9.12.18
10.5.0
10.4.1
10.3.4
10.3.3
10.4.0
10.3.2
10.3.1
10.3.0
10.2.1
10.2.0
9.12.17
9.12.16
10.1.2
10.1.1
10.0.1
10.0.0
9.17.5
9.17.4
9.17.3
9.17.2
9.16.1
9.12.15
9.12.14
9.12.13
9.4.28
9.4.27
9.4.26
9.4.25
9.4.24
9.4.23
9.4.22
9.12.12
9.12.11
9.12.10
9.12.9
9.17.1
9.17.0
9.12.8
9.4.21
9.16.0
9.15.2
9.15.1
9.12.7
9.4.20
9.12.6
9.4.19
9.15.0
9.14.1
9.12.5
9.4.18
9.14.0
9.12.4
9.4.17
9.12.3
9.4.16
9.13.1
9.13.0
9.12.2
9.4.15
8.20.30
9.12.1
8.20.29
9.4.14
9.4.13
9.12.0
9.11.3
9.4.12
8.20.28
9.11.2
9.4.11
8.20.27
9.10.2
9.11.1
8.20.26
9.4.10
9.7.2
9.11.0
9.9.2
9.8.2
9.10.1
8.20.25
9.4.9
9.10.0
9.9.1
8.20.24
9.4.8
9.4.7
8.20.23
9.9.0
9.8.1
9.4.6
8.20.22
9.8.0
9.7.1
9.7.0
9.4.5
9.4.4
8.20.21
8.20.20
8.20.19
9.4.3
8.20.18
9.6.0
9.5.1
9.4.2
9.3.3
9.5.0
9.4.1
9.3.2
9.2.1
8.20.17
8.20.16
9.4.0
8.20.15
9.3.1
8.20.14
8.13.27
9.3.0
9.2.0
8.20.13
8.20.12
8.13.26
8.13.25
9.1.1
9.1.0
8.22.6
8.22.5
8.20.11
8.13.24
9.0.0
8.22.4
8.20.10
8.13.22
8.22.3
8.22.2
8.20.9
8.20.8
8.13.21
8.13.20
8.22.1
8.22.0
8.21.1
8.21.0
8.20.7
8.20.6
8.20.5
8.20.4
8.20.3
8.20.2
8.20.1
8.20.0
8.19.1
8.19.0
8.18.2
8.13.19
8.13.18
8.13.17
8.13.16
8.13.15
8.13.14
8.13.13
8.13.12
8.13.11
8.13.10
8.5.19
8.5.18
8.18.1
8.18.0
8.17.1
8.17.0
8.16.2
8.16.1
8.16.0
8.15.1
8.15.0
8.14.1
8.14.0
8.13.9
8.13.8
8.13.7
8.13.6
8.13.5
8.13.4
8.13.3
8.13.2
8.13.1
8.13.0
8.12.3
8.12.2
8.12.1
8.12.0
8.11.1
8.11.0
8.10.1
8.10.0
8.9.1
8.9.0
8.8.1
8.8.0
8.7.1
8.7.0
8.6.1
8.6.0
8.5.17
8.5.16
8.5.15
8.5.14
8.5.13
8.5.12
8.5.11
8.5.10
8.5.9
8.5.8
8.5.7
8.5.6
8.5.5
8.5.4
8.5.3
8.5.2
8.5.1
8.5.0
8.4.3
8.4.2
8.4.1
8.4.0
8.3.5
8.3.4
8.3.3
8.3.2
8.3.1
8.3.0
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.3
8.1.2
8.1.1
8.1.0
8.0.3
8.0.2
8.0.0
7.13.18
7.13.17
7.13.16
7.13.15
7.13.14
7.13.13
7.13.12
7.13.11
7.13.9
7.13.8
7.13.6
7.13.5
7.13.4
7.13.3
7.13.2
7.13.1
7.13.0
7.12.3
7.12.2
7.12.1
7.12.0
7.11.2
7.11.1
7.11.0
7.10.2
7.10.1
7.10.0
7.9.2
7.9.0
7.8.4
7.8.2
7.8.1
7.8.0
7.7.4
7.7.2
7.7.1
7.7.0
7.6.17
7.6.16
7.6.15
7.6.14
7.6.13
7.6.12
7.6.11
7.6.10
7.6.9
7.6.8
7.6.7
7.6.6
7.6.4
7.6.3
7.6.2
7.6.1
7.6.0
7.5.4
7.5.3
7.5.2
7.5.1
7.5.0
7.4.6
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.15
7.2.14
7.2.13
7.2.12
7.2.11
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.1.10
7.1.9
7.1.8
7.1.7
7.1.6
7.1.5
7.1.4
7.1.3
7.1.2
7.1.1
7.1.0
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.15
6.3.14
6.3.13
6.3.12
6.3.11
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.3.0
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
Vulnerabilities (152)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU73938 - Improper Control of Generation of Code ('Code Injection') CVE-2022-36799 |
CWE-94 | Low | 8.13.19, 8.20.7, 8.22.1 | 22.03.2023 |
SB2023032221 |
||
| #VU68832 - Resource exhaustion CVE-2022-42004 |
CWE-400 | Medium | 8.20.28, 9.4.12, 9.11.3 | 31.10.2022 |
SB2022103116 SB2022103117 SB2022111404 and 122 more |
||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | 8.20.28, 9.4.12, 9.11.3 | 25.10.2022 |
SB2022102509 SB2022102510 SB2022103117 and 208 more |
||
| #VU65121 - Server-Side Request Forgery (SSRF) CVE-2022-26135 |
CWE-918 | Medium | 8.13.22, 8.20.10, 8.22.4, 9.0.0 | 11.07.2022 |
SB2022071179 |
||
| #VU64152 - Deserialization of Untrusted Data CVE-2022-25647 |
CWE-502 | Medium | 8.20.28, 9.4.19, 9.11.3 | 10.06.2022 |
SB2021120221 SB2022061003 SB2022061421 and 94 more |
||
| #VU63958 - Improper Control of Generation of Code ('Code Injection') CVE-2022-26134 |
CWE-94 | Critical | - | 03.06.2022 |
SB2022060301 |
||
| #VU62540 - Improper Authentication CVE-2022-0540 |
CWE-287 | High | 8.13.18, 8.20.6, 8.22.0 | 25.04.2022 |
SB2022042501 |
||
| #VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-37714 |
CWE-835 | Medium | 8.20.28, 9.4.12, 9.11.3 | 16.11.2021 |
SB2021111606 SB2021111715 SB2022012314 and 24 more |
||
| #VU55284 - Missing Authentication for Critical Function CVE-2020-36239 |
CWE-306 | Critical | 8.5.16, 8.13.8, 8.17.0 | 24.07.2021 |
SB2021072401 |
||
| #VU51876 - Resource exhaustion CVE-2021-28165 |
CWE-400 | Medium | 8.20.27, 9.10.2, 9.11.1 | 01.04.2021 |
SB2021040179 SB2021042208 SB2021050704 and 56 more |
||
| #VU13527 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2017-7656 |
CWE-444 | Low | 8.20.27, 9.10.2, 9.11.1 | 30.06.2018 |
SB2018070205 SB2018082001 SB2022041923 and 17 more |
||
| #VU9654 - Information Exposure Through Timing Discrepancy CVE-2017-9735 |
CWE-208 | Low | 8.20.27, 9.10.2, 9.11.1 | 17.06.2017 |
SB2017061704 SB2021072132 SB2023042803 and 12 more |
Showing elements 141 - 160 out of 152