Known vulnerabilities in Jira Service Management Data Center

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_service_management_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 210
Public exploits: 28
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Service Management Data Center Jira Service Management Data Center is affected by 210 known vulnerabilities: 2 critical, 22 high, 162 medium, 24 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153326 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-21589
CWE-22 Medium
No
No
5.12.40, 10.3.26, 11.3.12 06.10.2026 SB2026100635
SB2026100636
SB2026100637
and 5 more
#VU150181 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-44728
CWE-94 High
No
No
10.3.23, 11.3.10 16.09.2026 SB2026091631
SB2026091642
SB2026091643
#VU146435 - Improper Certificate Validation
CVE-2026-8763
CWE-295 Medium
No
No
10.3.25, 11.3.11 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 8 more
#VU140707 - Resource exhaustion
CVE-2026-69152
CWE-400 Medium
No
No
10.3.25, 11.3.10 01.08.2026 SB2026080125
SB2026081044
SB2026083142
and 9 more
#VU140706 - Allocation of Resources Without Limits or Throttling
CVE-2026-14257
CWE-770 Medium
No
No
10.3.25, 11.3.10 01.08.2026 SB2026080124
SB2026083142
SB2026083146
and 10 more
#VU140701 - Interpretation Conflict
CVE-2026-18446
CWE-436 Medium
No
No
10.3.25, 11.3.1 01.08.2026 SB2026080119
SB2026083172
SB2026083174
and 6 more
#VU139375 - Uncontrolled Recursion
CVE-2026-73566
CWE-674 Medium
No
No
10.3.18, 11.3.10 26.07.2026 SB2026072605
SB2026091637
SB2026091642
and 2 more
#VU139252 - Resource exhaustion
CVE-2026-73507
CWE-400 Medium
No
No
10.3.24, 11.3.10 24.07.2026 SB2026072404
SB2026091634
SB2026091638
and 3 more
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512
CWE-502 High
No
No
10.3.25, 11.3.10 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 36 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513
CWE-184 High
No
No
10.3.25, 11.3.10 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU139098 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-73646
CWE-22 Medium
No
No
10.3.25, 11.3.11 22.07.2026 SB2026072248
SB2026091634
SB2026091640
and 2 more
#VU139081 - Interpretation Conflict
CVE-2026-16221
CWE-436 Medium
No
No
10.3.25, 11.3.1 22.07.2026 SB2026072226
SB2026083172
SB2026083174
and 6 more
#VU138918 - Interpretation Conflict
CVE-2026-13676
CWE-436 High
No
No
10.3.25, 11.3.1 21.07.2026 SB2026072195
SB2026072237
SB2026072238
and 12 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276
CWE-670 Low
No
No
10.3.23, 11.3.8 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 11 more
#VU135865 - Improper Certificate Validation
CVE-2026-53434
CWE-295 Medium
No
No
10.3.23, 11.3.8 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 11 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404
CWE-670 Medium
No
No
10.3.23, 11.3.8 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 13 more
#VU131920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47761
CWE-79 Low
No
No
10.3.25 20.05.2026 SB2026052050
SB2026091642
SB2026091643
#VU131919 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47762
CWE-79 Low
No
No
10.3.25 20.05.2026 SB2026052050
SB2026091642
SB2026091643
#VU131918 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47759
CWE-79 Low
No
No
10.3.25 20.05.2026 SB2026052050
SB2026091642
SB2026091643
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175
CWE-94 Medium
No
No
10.3.24, 11.3.10 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 46 more


Showing elements 1 - 20 out of 210