Known vulnerabilities in Jira Service Management Server - page 2
Vendor:
Atlassian
Software:
Jira Service Management Server
Software CPE:
cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
76
Public exploits:
16
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.3.21
10.3.20
10.3.19
10.3.18
11.3.6
11.3.5
11.3.4
10.3.22
11.3.7
11.3.2
11.3.1
11.3.3
10.3.17
5.16.2
5.12.29
10.3.16
11.3.0
10.3.15
10.3.14
11.2.1
10.3.13
11.2.0
10.7.4
11.1.1
11.1.0
10.3.12
5.12.28
5.12.27
10.3.11
10.3.10
11.0.1
10.7.3
10.3.9
5.12.26
11.0.0
5.12.25
5.12.24
5.12.23
10.7.2
10.7.1
10.3.8
10.3.7
10.3.6
10.6.1
10.6.0
5.12.22
10.3.5
10.5.1
5.12.21
5.12.20
5.12.19
5.12.18
10.5.0
10.4.1
10.4.0
10.3.4
10.3.3
10.3.2
10.3.1
10.3.0
10.2.1
10.2.0
10.1.2
5.17.5
5.12.17
5.12.16
5.4.28
5.12.15
10.1.1
10.0.1
10.0.0
5.17.4
5.17.3
5.17.2
5.17.1
5.17.0
5.16.1
5.12.14
5.12.13
5.12.12
5.12.11
5.12.10
5.12.9
5.4.27
5.4.26
5.4.25
5.4.24
5.4.23
5.4.22
5.12.8
5.4.21
5.16.0
5.15.3
5.15.2
5.15.1
5.12.7
5.4.20
5.12.6
5.4.19
5.15.0
5.14.1
5.12.5
5.4.18
5.14.0
5.12.4
5.4.17
5.12.3
5.4.16
5.13.1
5.13.0
5.12.2
5.4.15
4.20.30
5.12.1
4.20.29
5.4.14
5.4.13
5.12.0
5.11.3
5.4.12
4.20.28
5.11.2
5.4.11
4.20.27
5.10.2
5.11.1
4.20.26
5.4.10
5.7.2
5.11.0
5.9.2
5.8.2
5.10.1
4.20.25
5.4.9
5.10.0
5.9.1
4.20.24
5.4.8
5.4.7
4.20.23
5.9.0
5.8.1
5.4.6
4.20.22
5.8.0
5.7.1
5.7.0
5.4.5
5.4.4
4.20.21
4.20.20
4.20.19
5.4.3
4.20.18
5.6.0
5.5.1
5.4.2
5.3.3
5.5.0
5.4.1
5.3.2
5.2.1
4.20.17
4.20.16
5.4.0
4.20.15
5.3.1
4.20.14
4.13.27
5.3.0
5.2.0
4.20.13
4.20.12
4.13.26
4.13.25
5.1.1
4.13.24
5.1.0
4.22.6
4.22.5
4.20.11
5.0.0
4.22.4
4.20.10
4.13.22
4.22.3
4.20.9
4.13.21
4.22.2
4.20.8
4.13.20
4.22.1
4.22.0
4.20.7
4.20.6
4.13.19
4.13.18
4.21.1
4.20.5
4.20.4
4.13.17
4.13.16
4.20.3
4.13.15
4.21.0
4.20.2
4.13.14
4.20.1
4.20.0
4.19.1
4.13.13
4.13.12
4.13.11
4.5.19
4.19.0
4.18.2
4.13.10
4.5.18
4.18.1
4.18.0
4.17.1
4.17.0
4.16.2
4.16.1
4.16.0
4.15.1
4.15.0
4.14.1
4.14.0
4.13.9
4.13.8
4.13.7
4.13.6
4.13.5
4.13.4
4.13.3
4.13.2
4.13.1
4.13.0
4.12.3
4.12.2
4.12.1
4.12.0
4.11.1
4.11.0
4.10.1
4.10.0
4.9.1
4.9.0
4.8.1
4.8.0
4.7.1
4.7.0
4.6.1
4.5.17
4.5.16
4.5.15
4.5.14
4.5.13
4.5.12
4.5.11
4.5.10
4.5.9
4.5.8
4.5.7
4.5.6
4.5.5
4.5.4
4.5.3
4.5.2
4.0.0-m0029
3.16.18
3.16.17
3.16.16
3.16.15
3.16.14
3.16.13
3.16.12
3.16.11
3.1.10
3.0.11
4.5.0
4.4.2
4.3.5
4.2.6
4.5.1
4.4.3
3.16.9
3.9.17
4.6.0
3.0.3
4.4.1
4.4.0
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.3
4.1.2
4.1.1
4.1.0
4.0.4
4.0.3
4.0.2
4.0.0
3.16.8
3.16.6
3.16.5
3.16.4
3.16.3
3.16.2
3.16.1
3.16.0
3.15.3
3.15.2
3.15.1
3.15.0
3.14.2
3.14.1
3.14.0
3.13.2
3.13.1
3.13.0
3.12.3
3.12.2
3.12.0
3.11.4
3.11.3
3.11.2
3.11.1
3.11.0
3.10.4
3.10.2
3.10.1
3.10.0
3.9.16
3.9.15
3.9.14
3.9.13
3.9.12
3.9.11
3.9.10
3.9.9
3.9.8
3.9.7
3.9.6
3.9.4
3.9.3
3.9.2
3.9.1
3.9.0
3.8.5
3.8.4
3.8.3
3.8.2
3.8.1
3.7.2
3.7.1
3.7.0
3.6.4
3.6.2
3.6.1
3.6.0
3.5.3
3.5.2
3.5.1
3.5.0
3.4.2
3.4.1
3.4.0
3.3.2
3.3.1
3.3.0
3.2.15
3.2.14
3.2.13
3.2.12
3.2.11
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.9
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.2
3.1.1
3.1.0
3.0.10
3.0.9
3.0.5
3.0.4
3.0.2
3.0.0
2.5.9
2.5.8
2.5.6
2.5.4
2.5.3
2.5.2
2.5.0
2.4.3
2.4.2
2.4.1
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3
2.2.1
2.2
2.1.2
2.1.1
2.1
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.2.7
1.2.6.1
1.2.6
1.2.5
1.2.4.1
1.2.4
1.2.1
1.2.0.2
1.2.0.1
1.2
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1
1.0.4
1.0.3
1.0
Vulnerabilities (76)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117434 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-22167 |
CWE-22 | Medium | 5.12.28, 10.3.12, 11.1.0 | 21.10.2025 |
SB2025102173 SB20251023134 |
||
| #VU115573 - Protection Mechanism Failure CVE-2025-41249 |
CWE-693 | Medium | 11.2.0 | 16.09.2025 |
SB20250916314 SB2025100741 SB20251008143 and 62 more |
||
| #VU115570 - Protection Mechanism Failure CVE-2025-41248 |
CWE-693 | Medium | 11.2.0 | 16.09.2025 |
SB20250916313 SB2025100741 SB20251008143 and 33 more |
||
| #VU114026 - Resource exhaustion CVE-2025-55163 |
CWE-400 | Medium | 10.3.12, 11.1.0 | 13.08.2025 |
SB2025081378 SB2025081948 SB2025081949 and 71 more |
||
| #VU114024 - Resource exhaustion CVE-2025-48989 |
CWE-400 | Medium | 5.12.28, 10.3.10, 11.0.1 | 13.08.2025 |
SB2025081375 SB2025081376 SB20250820127 and 49 more |
||
| #VU112276 - Resource exhaustion CVE-2025-53506 |
CWE-400 | Medium | 5.12.26, 10.3.9, 10.7.3, 11.0.1 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 41 more |
||
| #VU112275 - Resource Management Errors CVE-2025-52520 |
CWE-399 | Medium | 5.12.26, 10.3.9, 10.7.3, 11.0.1 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 42 more |
||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | 5.12.26, 10.3.10, 10.7.3, 11.2.0 | 16.06.2025 |
SB2025061634 SB2025061635 SB2025061927 and 156 more |
||
| #VU111161 - Resource exhaustion CVE-2025-48988 |
CWE-400 | Medium | 5.12.25, 10.3.8, 10.7.2 | 16.06.2025 |
SB2025061634 SB2025061927 SB20250620145 and 40 more |
||
| #VU111159 - Improper Protection of Alternate Path CVE-2025-49125 |
CWE-424 | Medium | 5.12.25, 10.3.8, 10.7.2 | 16.06.2025 |
SB2025061634 SB2025061927 SB20250620145 and 35 more |
||
| #VU109959 - Improper Handling of Case Sensitivity CVE-2025-46701 |
CWE-178 | Low | 5.12.24, 10.3.7, 10.7.1 | 30.05.2025 |
SB2025053002 SB2025061335 SB2025062313 and 22 more |
||
| #VU109240 - Configuration CVE-2025-27820 |
CWE-16 | Medium | 5.12.24, 10.3.8, 10.7.2 | 16.05.2025 |
SB2025051604 SB2025060628 SB2025063009 and 10 more |
||
| #VU107996 - Error Handling CVE-2025-31650 |
CWE-388 | Medium | 10.3.6, 10.6.1 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 38 more |
||
| #VU106926 - Resource Management Errors CVE-2024-57699 |
CWE-399 | Medium | 5.12.22, 10.3.5, 10.3.17, 10.5.1, 11.3.3 | 03.04.2025 |
SB2025040317 SB2025040325 SB2025040326 and 63 more |
||
| #VU105881 - Security Features CVE-2025-22228 |
CWE-254 | Low | 5.12.24, 10.3.7, 10.7.1 | 19.03.2025 |
SB2025031966 SB2025040327 SB2025061733 and 24 more |
||
| #VU103770 - Improper input validation CVE-2025-24970 |
CWE-20 | Medium | 5.12.20, 10.3.5, 10.5.1, 10.6.0 | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 88 more |
||
| #VU100095 - Memory corruption CVE-2024-47072 |
CWE-119 | Medium | 5.12.19, 10.3.4, 10.5.0 | 07.11.2024 |
SB20241107102 SB20241115126 SB2024112531 and 36 more |
||
| #VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819 |
CWE-22 | Medium | 5.12.19 | 17.10.2024 |
SB2024101781 SB2024112849 SB2024120331 and 54 more |
||
| #VU98024 - Improper input validation CVE-2024-47561 |
CWE-20 | High | 5.12.15, 5.17.5, 10.3.1 | 03.10.2024 |
SB2024100351 SB2024100504 SB2024100984 and 36 more |
||
| #VU61721 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-33813 |
CWE-611 | Medium | 5.12.22 | 29.03.2022 |
SB2021061628 SB2022032929 SB2022032930 and 39 more |
Showing elements 21 - 40 out of 76