Known vulnerabilities in Jira Service Management Server - page 4
Vendor:
Atlassian
Software:
Jira Service Management Server
Software CPE:
cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
76
Public exploits:
16
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.3.21
10.3.20
10.3.19
10.3.18
11.3.6
11.3.5
11.3.4
10.3.22
11.3.7
11.3.2
11.3.1
11.3.3
10.3.17
5.16.2
5.12.29
10.3.16
11.3.0
10.3.15
10.3.14
11.2.1
10.3.13
11.2.0
10.7.4
11.1.1
11.1.0
10.3.12
5.12.28
5.12.27
10.3.11
10.3.10
11.0.1
10.7.3
10.3.9
5.12.26
11.0.0
5.12.25
5.12.24
5.12.23
10.7.2
10.7.1
10.3.8
10.3.7
10.3.6
10.6.1
10.6.0
5.12.22
10.3.5
10.5.1
5.12.21
5.12.20
5.12.19
5.12.18
10.5.0
10.4.1
10.4.0
10.3.4
10.3.3
10.3.2
10.3.1
10.3.0
10.2.1
10.2.0
10.1.2
5.17.5
5.12.17
5.12.16
5.4.28
5.12.15
10.1.1
10.0.1
10.0.0
5.17.4
5.17.3
5.17.2
5.17.1
5.17.0
5.16.1
5.12.14
5.12.13
5.12.12
5.12.11
5.12.10
5.12.9
5.4.27
5.4.26
5.4.25
5.4.24
5.4.23
5.4.22
5.12.8
5.4.21
5.16.0
5.15.3
5.15.2
5.15.1
5.12.7
5.4.20
5.12.6
5.4.19
5.15.0
5.14.1
5.12.5
5.4.18
5.14.0
5.12.4
5.4.17
5.12.3
5.4.16
5.13.1
5.13.0
5.12.2
5.4.15
4.20.30
5.12.1
4.20.29
5.4.14
5.4.13
5.12.0
5.11.3
5.4.12
4.20.28
5.11.2
5.4.11
4.20.27
5.10.2
5.11.1
4.20.26
5.4.10
5.7.2
5.11.0
5.9.2
5.8.2
5.10.1
4.20.25
5.4.9
5.10.0
5.9.1
4.20.24
5.4.8
5.4.7
4.20.23
5.9.0
5.8.1
5.4.6
4.20.22
5.8.0
5.7.1
5.7.0
5.4.5
5.4.4
4.20.21
4.20.20
4.20.19
5.4.3
4.20.18
5.6.0
5.5.1
5.4.2
5.3.3
5.5.0
5.4.1
5.3.2
5.2.1
4.20.17
4.20.16
5.4.0
4.20.15
5.3.1
4.20.14
4.13.27
5.3.0
5.2.0
4.20.13
4.20.12
4.13.26
4.13.25
5.1.1
4.13.24
5.1.0
4.22.6
4.22.5
4.20.11
5.0.0
4.22.4
4.20.10
4.13.22
4.22.3
4.20.9
4.13.21
4.22.2
4.20.8
4.13.20
4.22.1
4.22.0
4.20.7
4.20.6
4.13.19
4.13.18
4.21.1
4.20.5
4.20.4
4.13.17
4.13.16
4.20.3
4.13.15
4.21.0
4.20.2
4.13.14
4.20.1
4.20.0
4.19.1
4.13.13
4.13.12
4.13.11
4.5.19
4.19.0
4.18.2
4.13.10
4.5.18
4.18.1
4.18.0
4.17.1
4.17.0
4.16.2
4.16.1
4.16.0
4.15.1
4.15.0
4.14.1
4.14.0
4.13.9
4.13.8
4.13.7
4.13.6
4.13.5
4.13.4
4.13.3
4.13.2
4.13.1
4.13.0
4.12.3
4.12.2
4.12.1
4.12.0
4.11.1
4.11.0
4.10.1
4.10.0
4.9.1
4.9.0
4.8.1
4.8.0
4.7.1
4.7.0
4.6.1
4.5.17
4.5.16
4.5.15
4.5.14
4.5.13
4.5.12
4.5.11
4.5.10
4.5.9
4.5.8
4.5.7
4.5.6
4.5.5
4.5.4
4.5.3
4.5.2
4.0.0-m0029
3.16.18
3.16.17
3.16.16
3.16.15
3.16.14
3.16.13
3.16.12
3.16.11
3.1.10
3.0.11
4.5.0
4.4.2
4.3.5
4.2.6
4.5.1
4.4.3
3.16.9
3.9.17
4.6.0
3.0.3
4.4.1
4.4.0
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.3
4.1.2
4.1.1
4.1.0
4.0.4
4.0.3
4.0.2
4.0.0
3.16.8
3.16.6
3.16.5
3.16.4
3.16.3
3.16.2
3.16.1
3.16.0
3.15.3
3.15.2
3.15.1
3.15.0
3.14.2
3.14.1
3.14.0
3.13.2
3.13.1
3.13.0
3.12.3
3.12.2
3.12.0
3.11.4
3.11.3
3.11.2
3.11.1
3.11.0
3.10.4
3.10.2
3.10.1
3.10.0
3.9.16
3.9.15
3.9.14
3.9.13
3.9.12
3.9.11
3.9.10
3.9.9
3.9.8
3.9.7
3.9.6
3.9.4
3.9.3
3.9.2
3.9.1
3.9.0
3.8.5
3.8.4
3.8.3
3.8.2
3.8.1
3.7.2
3.7.1
3.7.0
3.6.4
3.6.2
3.6.1
3.6.0
3.5.3
3.5.2
3.5.1
3.5.0
3.4.2
3.4.1
3.4.0
3.3.2
3.3.1
3.3.0
3.2.15
3.2.14
3.2.13
3.2.12
3.2.11
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.9
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.2
3.1.1
3.1.0
3.0.10
3.0.9
3.0.5
3.0.4
3.0.2
3.0.0
2.5.9
2.5.8
2.5.6
2.5.4
2.5.3
2.5.2
2.5.0
2.4.3
2.4.2
2.4.1
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3
2.2.1
2.2
2.1.2
2.1.1
2.1
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.2.7
1.2.6.1
1.2.6
1.2.5
1.2.4.1
1.2.4
1.2.1
1.2.0.2
1.2.0.1
1.2
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1
1.0.4
1.0.3
1.0
Vulnerabilities (76)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU75044 - Uncontrolled Recursion CVE-2023-1370 |
CWE-674 | Medium | 4.20.27 | 12.04.2023 |
SB2023041258 SB2023041259 SB2023041809 and 130 more |
||
| #VU69670 - Improper input validation CVE-2022-3509 |
CWE-20 | Medium | 4.20.27, 5.4.11 | 29.11.2022 |
SB2022111433 SB2022112934 SB2023011787 and 58 more |
||
| #VU69293 - Improper input validation CVE-2022-3171 |
CWE-20 | Medium | 4.20.27, 5.4.11 | 14.11.2022 |
SB2022111433 SB2022111440 SB2022112934 and 105 more |
||
| #VU65892 - Insufficient Verification of Data Authenticity CVE-2022-26137 |
CWE-345 | Medium | 4.13.22, 4.20.10, 4.22.4, 4.22.6, 5.0.0 | 29.07.2022 |
SB2022072917 |
||
| #VU65891 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-26136 |
CWE-79 | Low | 4.13.22, 4.20.10, 4.22.4, 4.22.6, 5.0.0 | 29.07.2022 |
SB2022072917 |
||
| #VU65121 - Server-Side Request Forgery (SSRF) CVE-2022-26135 |
CWE-918 | Medium | 4.13.22, 4.20.10, 4.22.4, 5.0.0 | 11.07.2022 |
SB2022071179 |
||
| #VU64152 - Deserialization of Untrusted Data CVE-2022-25647 |
CWE-502 | Medium | 4.20.25, 5.4.9, 5.7.2, 5.8.2, 5.9.2, 5.10.1, 5.11.0 | 10.06.2022 |
SB2021120221 SB2022061003 SB2022061421 and 94 more |
||
| #VU62540 - Improper Authentication CVE-2022-0540 |
CWE-287 | High | 4.13.18, 4.20.6, 4.22.0 | 25.04.2022 |
SB2022042501 |
||
| #VU61799 - Out-of-bounds write CVE-2020-36518 |
CWE-787 | Medium | 4.20.27, 5.4.11 | 01.04.2022 |
SB2022040113 SB2022040114 SB2022040115 and 147 more |
||
| #VU60181 - Resource Management Errors CVE-2021-22569 |
CWE-399 | Medium | 4.20.27, 5.4.11 | 31.01.2022 |
SB2022013106 SB2022013107 SB2022041933 and 42 more |
||
| #VU59148 - Deserialization of Untrusted Data CVE-2021-46877 |
CWE-502 | Medium | 4.20.27 | 03.01.2022 |
SB2022010326 SB2022010327 SB2022062734 and 37 more |
||
| #VU59101 - Improper Control of Generation of Code ('Code Injection') CVE-2021-39115 |
CWE-94 | Low | 4.13.9, 4.18.0 | 28.12.2021 |
SB2021122820 |
||
| #VU22573 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2019-15004 |
CWE-22 | High | 3.9.17, 3.16.9, 4.2.6, 4.3.5, 4.4.3, 4.5.1 | 07.11.2019 |
SB2019110704 |
||
| #VU22572 - Improper Authorization CVE-2019-15003 |
CWE-285 | Medium | 3.9.17, 3.16.9, 4.2.6, 4.3.5, 4.4.3, 4.5.1, 4.6.0 | 07.11.2019 |
SB2019110704 |
||
| #VU21272 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2019-14994 |
CWE-22 | Medium | 3.9.16, 3.16.8, 4.1.3, 4.2.5, 4.3.4, 4.4.1 | 23.09.2019 |
SB2019092304 |
||
| #VU19595 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-13990 |
CWE-611 | Medium | 4.20.26, 5.4.10, 5.7.2, 5.8.2, 5.9.2, 5.10.1 | 01.08.2019 |
SB2019080104 SB2020042114 SB2020042350 and 26 more |
Showing elements 61 - 80 out of 76