Known vulnerabilities in Jira Service Management Data Center - page 3

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_service_management_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 135
Public exploits: 24
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Service Management Data Center Jira Service Management Data Center is affected by 135 known vulnerabilities: 2 critical, 12 high, 106 medium, 15 low Critical High Medium Low

Vulnerabilities (135)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132949 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44495
CWE-1321 Medium
No
No
10.3.22, 11.3.7 29.05.2026 SB20260424169
SB2026061999
SB20260619101
and 10 more
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-40175
CWE-113 Medium
No
No
10.3.22, 11.3.7 20.05.2026 SB2026052045
SB2026052051
SB2026052052
and 21 more
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498
CWE-200 Low
No
No
10.3.22, 11.3.7 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 18 more
#VU131182 - Improper input validation
CVE-2026-41293
CWE-20 Medium
No
No
10.3.22, 11.3.7 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 21 more
#VU128397 - Improper input validation
CVE-2026-33750
CWE-20 Medium
No
No
10.3.20, 11.3.5 28.04.2026 SB20260428215
SB20260428223
SB2026042934
and 8 more
#VU128373 - Protection Mechanism Failure
CVE-2026-22732
CWE-693 High
No
No
10.3.7, 11.3.5 28.04.2026 SB20260427181
SB2026043058
SB2026050514
and 5 more
#VU126872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-31802
CWE-22 Low
Available
No
11.3.5 22.04.2026 SB20260422243
SB20260428143
SB2026050670
and 3 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483
CWE-116 Medium
No
No
10.3.20, 11.3.5 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 19 more
#VU124876 - Inefficient Regular Expression Complexity
CVE-2026-25547
CWE-1333 Low
No
No
10.3.19, 11.3.4 06.04.2026 SB2026040628
SB2026040631
SB2026040632
and 13 more
#VU124772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22029
CWE-79 Low
No
No
10.3.20, 11.3.5 01.04.2026 SB2026040154
SB2026040164
SB2026041309
and 10 more
#VU123629 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-29786
CWE-59 High
Available
No
10.3.18, 11.3.5 09.03.2026 SB2026030915
SB2026050668
SB2026060237
and 3 more
#VU123491 - Memory corruption
CVE-2026-29062
CWE-119 Medium
No
No
11.3.5 04.03.2026 SB2026030413
SB2026060232
SB2026060234
and 3 more
#VU123172 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-26960
CWE-22 Medium
No
No
10.3.18, 11.3.5 24.02.2026 SB2026022432
SB20260428166
SB2026042935
and 2 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639
CWE-754 Medium
Available
No
10.3.20, 11.3.4 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 23 more
#VU121671 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23950
CWE-362 Medium
Available
No
10.3.18, 11.3.3 20.01.2026 SB2026012003
SB20260202129
SB2026020564
and 9 more
#VU121640 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23745
CWE-22 Medium
Available
No
10.3.18, 11.3.3 19.01.2026 SB2026011930
SB20260202129
SB2026020564
and 11 more
#VU111165 - Improper Access Control
CVE-2025-48734
CWE-284 Medium
No
No
10.3.10 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875
CWE-79 Medium
No
No
10.3.13 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU76190 - Improper Certificate Validation
CVE-2021-31597
CWE-295 Medium
No
No
11.3.4 16.05.2023 SB2021042338
SB2021091540
SB2021062325
and 1 more
#VU72323 - Improper Certificate Validation
CVE-2021-0341
CWE-295 Medium
No
No
10.3.16 16.02.2023 SB2023021628
SB2023051043
SB2023051044
and 14 more


Showing elements 41 - 60 out of 135