Known vulnerabilities in Jira Service Management Data Center - page 3

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_service_management_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 210
Public exploits: 28
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Service Management Data Center Jira Service Management Data Center is affected by 210 known vulnerabilities: 2 critical, 22 high, 162 medium, 24 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146374 - Server-Side Request Forgery (SSRF)
CVE-2026-69192
CWE-918 Medium
No
No
11.3.5 31.08.2026 SB2026083145
SB2026083146
SB2026083185
and 2 more
#VU146174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41845
CWE-79 Medium
No
No
11.3.8 28.08.2026 SB20260828154
SB2026083181
SB2026083182
and 3 more
#VU146170 - Resource exhaustion
CVE-2026-41842
CWE-400 Medium
No
No
11.3.8 28.08.2026 SB20260828154
SB2026083172
SB2026083181
and 3 more
#VU145387 - Missing release of memory after effective lifetime
CVE-2026-68763
CWE-401 Medium
No
No
10.3.25, 11.3.11 26.08.2026 SB2026082616
SB2026091634
SB2026091642
and 4 more
#VU145064 - Improper Handling of URL Encoding (Hex Encoding)
CVE-2026-76172
CWE-177 Medium
No
No
10.3.25, 11.3.1 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 7 more
#VU139178 - Resource exhaustion
CVE-2026-55685
CWE-400 Low
No
No
10.3.14, 11.2.0 22.07.2026 SB2026072295
SB2026083183
SB2026083187
and 1 more
#VU138926 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-12143
CWE-93 High
No
No
10.3.24, 11.3.10 21.07.2026 SB20260721116
SB2026072414
SB2026072616
and 20 more
#VU137572 - Resource exhaustion
CVE-2026-55831
CWE-400 Medium
No
No
10.3.24, 11.3.10 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU137568 - Missing Release of Resource after Effective Lifetime
CVE-2026-56745
CWE-772 Medium
No
No
10.3.24, 11.3.10 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU135820 - Inefficient Algorithmic Complexity
CVE-2026-13149
CWE-407 Medium
No
No
10.3.24, 11.3.10 29.06.2026 SB20260629111
SB2026072843
SB2026072877
and 19 more
#VU135766 - Type conversion
CVE-2026-59871
CWE-704 Medium
No
No
10.3.18, 11.3.10 29.06.2026 SB2026062989
SB2026083177
SB2026083182
and 2 more
#VU134753 - Allocation of Resources Without Limits or Throttling
CVE-2026-12151
CWE-770 Medium
No
No
11.3.10 17.06.2026 SB2026061760
SB20260720393
SB2026080430
and 13 more
#VU133457 - Incorrect Comparison
CVE-2026-44249
CWE-697 High
No
No
10.3.24, 11.3.8 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 19 more
#VU133452 - Improper Certificate Validation
CVE-2026-50010
CWE-295 Medium
No
No
10.3.24, 11.3.8 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 18 more
#VU133450 - Uncontrolled Memory Allocation
CVE-2026-45416
CWE-789 Medium
No
No
10.3.24, 11.3.8 08.06.2026 SB2026060813
SB20260626101
SB2026070110
and 21 more
#VU133441 - Missing Release of Resource after Effective Lifetime
CVE-2026-48043
CWE-772 Medium
No
No
10.3.24, 11.3.8 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 13 more
#VU133098 - Insertion of Sensitive Information Into Sent Data
CVE-2026-44487
CWE-201 Low
No
No
10.3.23, 11.3.10 31.05.2026 SB2026052927
SB2026061992
SB2026070157
and 17 more
#VU125803 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-4800
CWE-94 High
No
No
10.3.24, 11.3.7 10.04.2026 SB2026041094
SB20260410101
SB20260410102
and 65 more
#VU123174 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-27606
CWE-22 High
Available
No
11.3.10 24.02.2026 SB2026022445
SB2026040631
SB2026040632
and 4 more
#VU122999 - Improper Authorization
CVE-2026-24734
CWE-285 Medium
No
No
10.3.17, 11.3.3 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 27 more


Showing elements 41 - 60 out of 210