Known vulnerabilities in Jira Service Management Data Center - page 6

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_service_management_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 210
Public exploits: 28
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Service Management Data Center Jira Service Management Data Center is affected by 210 known vulnerabilities: 2 critical, 22 high, 162 medium, 24 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132949 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-44495
CWE-1321 Medium
No
No
10.3.22, 11.3.7 29.05.2026 SB20260424169
SB2026061999
SB20260619101
and 15 more
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-40175
CWE-113 Medium
No
No
10.3.22, 11.3.7 20.05.2026 SB2026052045
SB2026052051
SB2026052052
and 23 more
#VU131179 - Improper Handling of Case Sensitivity
CVE-2026-43513
CWE-178 Medium
No
No
10.3.22, 11.3.7 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 28 more
#VU131180 - Improper Authentication
CVE-2026-43512
CWE-287 Medium
Available
No
10.3.22, 11.3.7 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 29 more
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498
CWE-200 Low
No
No
10.3.22, 11.3.7 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 26 more
#VU131182 - Improper input validation
CVE-2026-41293
CWE-20 Medium
No
No
10.3.22, 11.3.7 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 30 more
#VU131183 - Resource exhaustion
CVE-2026-41284
CWE-400 Medium
No
No
10.3.22, 11.3.7 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 23 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585
CWE-444 Medium
No
No
10.3.22, 11.3.7 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 17 more
#VU130206 - Allocation of Resources Without Limits or Throttling
CVE-2026-42583
CWE-770 Medium
No
No
10.3.22, 11.3.7 05.05.2026 SB20260505124
SB2026052039
SB20260528254
and 14 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584
CWE-444 Medium
No
No
10.3.22, 11.3.7 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 17 more
#VU127606 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-42035
CWE-113 Medium
No
No
10.3.22, 11.3.7 24.04.2026 SB20260424169
SB2026061912
SB2026061913
and 18 more
#VU127603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42033
CWE-1321 Medium
No
No
10.3.22, 11.3.7 24.04.2026 SB20260424169
SB2026061954
SB2026061992
and 14 more
#VU127599 - Improper Access Control
CVE-2026-42038
CWE-284 Medium
No
No
10.3.22, 11.3.7 24.04.2026 SB20260424169
SB2026061992
SB2026061993
and 11 more
#VU127594 - Permissive List of Allowed Inputs
CVE-2026-42043
CWE-183 Medium
No
No
10.3.22, 11.3.7 24.04.2026 SB20260424169
SB2026061954
SB2026061999
and 12 more
#VU127592 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42264
CWE-1321 Medium
No
No
11.3.7 24.04.2026 SB20260424168
SB2026061999
SB20260619101
and 13 more
#VU126872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-31802
CWE-22 Low
Available
No
11.3.5 22.04.2026 SB20260422243
SB20260428143
SB2026050670
and 3 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718
CWE-918 High
No
No
10.3.22, 11.3.7 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 33 more
#VU125741 - Configuration
CVE-2026-29129
CWE-16 Medium
No
No
10.3.20, 11.3.5 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 13 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871
CWE-770 Medium
No
No
10.3.22, 11.3.5 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 17 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870
CWE-444 Medium
Available
No
10.3.22, 11.3.5 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 23 more


Showing elements 101 - 120 out of 210