Known vulnerabilities in Jira Service Management Data Center - page 5
Vendor:
Atlassian
Software:
Jira Service Management Data Center
Software CPE:
cpe:2.3:a:atlassian:jira_service_management_data_center:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
135
Public exploits:
24
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
11.3.10
10.3.24
11.3.8
10.3.23
11.3.6
11.3.7
10.3.21
10.3.22
10.3.20
11.3.5
10.3.19
11.3.4
11.3.2
11.3.3
10.3.17
10.3.18
5.16.2
11.3.1
5.12.29
10.3.16
11.3.0
10.3.15
10.3.14
11.2.1
10.3.13
11.2.0
5.12.28
5.12.27
10.3.12
10.3.11
10.3.10
11.1.1
11.1.0
10.7.4
11.0.1
10.7.3
10.3.9
5.12.26
11.0.0
5.12.25
5.12.24
5.12.23
10.7.2
10.7.1
10.3.8
10.3.7
10.3.6
10.6.1
10.6.0
5.12.22
10.3.5
10.5.1
5.12.21
5.12.20
5.12.19
5.12.18
10.5.0
10.4.1
10.4.0
10.3.4
10.3.3
10.3.2
10.3.1
10.3.0
10.2.1
10.2.0
10.1.2
5.17.5
5.12.17
5.12.16
5.12.15
5.4.28
5.4.27
5.4.26
5.4.25
5.4.24
5.4.23
5.4.22
10.1.1
10.0.1
10.0.0
5.17.4
5.17.3
5.17.2
5.17.1
5.17.0
5.16.1
5.12.14
5.12.13
5.12.12
5.12.11
5.12.10
5.12.9
5.12.8
5.4.21
5.16.0
5.15.3
5.15.2
5.15.1
5.12.7
5.4.20
5.12.6
5.4.19
5.15.0
5.14.1
5.12.5
5.4.18
5.14.0
5.12.4
5.4.17
5.12.3
5.4.16
5.13.1
5.13.0
5.12.2
5.4.15
4.20.30
5.12.1
4.20.29
5.4.14
5.4.13
5.12.0
5.11.3
5.4.12
4.20.28
5.11.2
5.4.11
4.20.27
5.10.2
5.11.1
4.20.26
5.4.10
5.7.2
5.11.0
5.9.2
5.8.2
5.10.1
5.4.9
4.20.25
5.10.0
5.9.1
4.20.24
5.4.8
5.4.7
4.20.23
5.9.0
5.8.1
5.4.6
4.20.22
5.8.0
5.7.1
5.7.0
5.4.5
5.4.4
4.20.21
4.20.20
4.20.19
5.4.3
4.20.18
5.6.0
5.5.1
5.4.2
5.3.3
5.5.0
5.4.1
5.3.2
5.2.1
4.20.17
4.20.16
5.4.0
4.20.15
5.3.1
4.20.14
4.13.27
5.3.0
5.2.0
4.20.13
4.20.12
4.13.26
4.13.25
5.1.1
5.1.0
4.22.6
4.22.5
4.20.11
4.13.24
4.22.4
4.20.10
4.13.22
5.0.0
4.22.3
4.20.9
4.13.21
4.22.2
4.20.8
4.13.20
4.22.1
4.22.0
4.21.1
4.21.0
4.20.7
4.20.6
4.20.5
4.20.4
4.20.3
4.20.2
4.13.19
4.13.18
4.13.17
4.13.16
4.13.15
4.13.14
4.20.1
4.20.0
4.13.13
4.13.12
4.19.1
4.5.19
4.13.11
4.19.0
4.18.2
4.13.10
4.5.18
4.18.1
4.18.0
4.17.1
4.17.0
4.16.2
4.16.1
4.16.0
4.15.1
4.15.0
4.14.1
4.14.0
4.13.9
4.13.8
4.13.7
4.13.6
4.13.5
4.13.4
4.13.3
4.13.2
4.13.1
4.13.0
4.12.3
4.12.2
4.12.1
4.12.0
4.11.1
4.11.0
4.10.1
4.10.0
4.9.1
4.9.0
4.8.1
4.8.0
4.7.1
4.7.0
4.6.1
4.6.0
4.5.17
4.5.16
4.5.15
4.5.14
4.5.13
4.5.12
4.5.11
4.5.10
4.5.9
4.5.8
4.5.7
4.5.6
4.5.5
4.5.4
4.5.3
4.5.2
4.5.1
4.5.0
4.4.3
4.4.2
4.4.1
4.4.0
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.3
4.1.2
4.1.1
4.1.0
4.0.3
4.0.2
4.0.0-m0029
4.0.0
3.16.18
3.16.17
3.16.16
3.16.15
3.16.14
3.16.13
3.16.12
3.16.11
3.16.9
3.16.8
3.16.6
3.16.5
3.16.4
3.16.3
3.16.2
3.16.1
3.16.0
3.15.3
3.15.2
3.15.1
3.15.0
3.14.2
3.14.1
3.14.0
3.13.2
3.13.1
3.13.0
3.12.2
3.12.0
3.11.4
3.11.2
3.11.1
3.11.0
3.10.4
3.10.2
3.10.1
3.10.0
3.9.17
3.9.16
3.9.15
3.9.14
3.9.13
3.9.12
3.9.11
3.9.10
3.9.9
3.9.8
3.9.7
3.9.6
3.9.4
3.9.3
3.9.2
3.9.1
3.9.0
3.8.5
3.8.4
3.8.3
3.8.2
3.8.1
3.7.2
3.7.1
3.7.0
3.6.4
3.6.2
3.6.1
3.6.0
3.5.3
3.5.2
3.5.1
3.5.0
3.4.2
3.4.1
3.4.0
3.3.1
3.3.0
3.2.15
3.2.14
3.2.13
3.2.12
3.2.11
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.10
3.1.9
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.2
3.1.1
3.1.0
3.0.11
3.0.10
3.0.9
3.0.5
3.0.4
3.0.2
3.0.0
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.4.3
2.4.2
2.4.1
2.4.0
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.2
2.2.1
2.2.0
2.1.2
2.1.1
2.1.0
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
Vulnerabilities (135)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117434 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-22167 |
CWE-22 | Medium | 5.12.28, 10.3.12, 11.1.0 | 21.10.2025 |
SB2025102173 SB20251023134 |
||
| #VU115573 - Protection Mechanism Failure CVE-2025-41249 |
CWE-693 | Medium | 11.2.0 | 16.09.2025 |
SB20250916314 SB2025100741 SB20251008143 and 62 more |
||
| #VU115570 - Protection Mechanism Failure CVE-2025-41248 |
CWE-693 | Medium | 11.2.0 | 16.09.2025 |
SB20250916313 SB2025100741 SB20251008143 and 33 more |
||
| #VU114761 - Resource exhaustion CVE-2025-58057 |
CWE-400 | Medium | 5.12.28, 10.3.11, 11.1.0 | 03.09.2025 |
SB2025090340 SB2025090949 SB2025101530 and 45 more |
||
| #VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-58056 |
CWE-444 | Medium | 5.12.28, 10.3.11, 11.1.0 | 03.09.2025 |
SB2025090340 SB2025090949 SB20251008161 and 38 more |
||
| #VU114346 - Command injection CVE-2025-7962 |
CWE-77 | Medium | 5.12.27, 10.3.10, 11.0.0, 11.0.1 | 21.08.2025 |
SB2025082145 SB2025082146 SB2025082147 and 54 more |
||
| #VU114026 - Resource exhaustion CVE-2025-55163 |
CWE-400 | Medium | 10.3.12, 11.1.0 | 13.08.2025 |
SB2025081378 SB2025081948 SB2025081949 and 71 more |
||
| #VU114024 - Resource exhaustion CVE-2025-48989 |
CWE-400 | Medium | 5.12.28, 10.3.10, 11.0.1 | 13.08.2025 |
SB2025081375 SB2025081376 SB20250820127 and 49 more |
||
| #VU112276 - Resource exhaustion CVE-2025-53506 |
CWE-400 | Medium | 5.12.26, 10.3.9, 10.7.3, 11.0.1 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 41 more |
||
| #VU112275 - Resource Management Errors CVE-2025-52520 |
CWE-399 | Medium | 5.12.26, 10.3.9, 10.7.3, 11.0.1 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 42 more |
||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | 5.12.26, 10.3.10, 10.7.3, 11.2.0 | 16.06.2025 |
SB2025061634 SB2025061635 SB2025061927 and 156 more |
||
| #VU111161 - Resource exhaustion CVE-2025-48988 |
CWE-400 | Medium | 5.12.25, 10.3.8, 10.7.2 | 16.06.2025 |
SB2025061634 SB2025061927 SB20250620145 and 40 more |
||
| #VU111159 - Improper Protection of Alternate Path CVE-2025-49125 |
CWE-424 | Medium | 5.12.25, 10.3.8, 10.7.2 | 16.06.2025 |
SB2025061634 SB2025061927 SB20250620145 and 35 more |
||
| #VU109959 - Improper Handling of Case Sensitivity CVE-2025-46701 |
CWE-178 | Low | 5.12.24, 10.3.7, 10.7.1 | 30.05.2025 |
SB2025053002 SB2025061335 SB2025062313 and 22 more |
||
| #VU109587 - Improper Privilege Management CVE-2025-22157 |
CWE-269 | Medium | 5.12.20, 10.3.5, 10.5.1, 10.6.0 | 21.05.2025 |
SB2025052196 SB2025052197 |
||
| #VU109240 - Configuration CVE-2025-27820 |
CWE-16 | Medium | 5.12.24, 10.3.8, 10.7.2 | 16.05.2025 |
SB2025051604 SB2025060628 SB2025063009 and 10 more |
||
| #VU107996 - Error Handling CVE-2025-31650 |
CWE-388 | Medium | 10.3.6, 10.6.1 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 38 more |
||
| #VU105881 - Security Features CVE-2025-22228 |
CWE-254 | Low | 5.12.24, 10.3.7, 10.7.1 | 19.03.2025 |
SB2025031966 SB2025040327 SB2025061733 and 24 more |
||
| #VU103770 - Improper input validation CVE-2025-24970 |
CWE-20 | Medium | 5.12.20, 10.3.5, 10.5.1, 10.6.0 | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 88 more |
||
| #VU61721 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-33813 |
CWE-611 | Medium | 5.12.22 | 29.03.2022 |
SB2021061628 SB2022032929 SB2022032930 and 39 more |
Showing elements 81 - 100 out of 135