Known vulnerabilities in Jira Service Management Server - page 3

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:*:*:*:*
Total vulnerabilities: 76
Public exploits: 16
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Service Management Server Jira Service Management Server is affected by 76 known vulnerabilities: 1 critical, 7 high, 58 medium, 10 low Critical High Medium Low

Vulnerabilities (76)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801
CWE-1321 Medium
No
No
5.4.28, 5.12.15, 5.17.4, 10.3.16, 11.3.0 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254
CWE-674 Medium
No
No
5.12.14, 5.17.4, 10.1.1 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU92227 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21685
CWE-200 Medium
No
No
5.4.21, 5.12.8, 5.16.0 18.06.2024 SB20240618114
SB20240618115
#VU87615 - Resource exhaustion
CVE-2023-52428
CWE-400 Medium
No
No
5.4.19, 5.12.6 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU87607 - Improper Access Control
CVE-2024-22257
CWE-284 Medium
No
No
5.4.20, 5.12.7, 5.15.2 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU86992 - Allocation of Resources Without Limits or Throttling
CVE-2024-21634
CWE-770 Medium
No
No
5.4.18, 5.12.6, 5.15.0 04.03.2024 SB2024030419
SB2024031125
SB2024032143
and 18 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
4.20.28, 5.4.12 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
4.20.28, 5.4.12 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635
CWE-681 Medium
No
No
4.20.28, 5.4.12 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729
CWE-918 Medium
No
No
4.20.30, 5.4.15, 5.12.2 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU77778 - Improper input validation
CVE-2022-29546
CWE-20 Low
No
No
4.20.28, 5.4.12 28.06.2023 SB2022050443
SB20230719104
SB20231018117
and 10 more
#VU77777 - Improper input validation
CVE-2022-28366
CWE-20 Low
No
No
4.20.28, 5.4.12 28.06.2023 SB2022042155
SB2023112475
SB2023121271
and 7 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
5.12.4, 5.13.1 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU70527 - Improper input validation
CVE-2022-41966
CWE-20 Medium
Available
No
5.4.18, 5.12.0 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Available
No
5.4.14, 5.11.2, 5.12.0 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
4.20.27, 5.4.11 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
4.20.27, 5.4.11 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU65499 - Improper input validation
CVE-2021-31684
CWE-20 Medium
No
No
4.20.27, 4.20.28, 5.4.12 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU65486 - Improper input validation
CVE-2022-24839
CWE-20 Medium
No
No
4.20.28, 5.4.12 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649
CWE-611 Medium
No
No
4.20.28, 5.4.12 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more


Showing elements 41 - 60 out of 76