Known vulnerabilities in Jira Service Management Data Center - page 6

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_service_management_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 135
Public exploits: 24
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Service Management Data Center Jira Service Management Data Center is affected by 135 known vulnerabilities: 2 critical, 12 high, 106 medium, 15 low Critical High Medium Low

Vulnerabilities (135)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106926 - Resource Management Errors
CVE-2024-57699
CWE-399 Medium
No
No
5.12.22, 10.3.5, 10.3.17, 10.5.1, 11.3.3 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 63 more
#VU100095 - Memory corruption
CVE-2024-47072
CWE-119 Medium
No
No
5.12.19, 10.3.4, 10.5.0 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819
CWE-22 Medium
Available
No
5.12.19 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98024 - Improper input validation
CVE-2024-47561
CWE-20 High
No
No
5.12.15, 5.17.5, 10.3.1 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801
CWE-1321 Medium
No
No
5.4.28, 5.12.15, 5.17.4, 10.3.16, 11.3.0 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254
CWE-674 Medium
No
No
5.12.14, 5.17.4, 10.1.1 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU92227 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21685
CWE-200 Medium
No
No
5.4.21, 5.12.8, 5.16.0 18.06.2024 SB20240618114
SB20240618115
#VU87615 - Resource exhaustion
CVE-2023-52428
CWE-400 Medium
No
No
5.4.19, 5.12.6 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU87607 - Improper Access Control
CVE-2024-22257
CWE-284 Medium
No
No
5.4.20, 5.12.7, 5.15.2 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU86992 - Allocation of Resources Without Limits or Throttling
CVE-2024-21634
CWE-770 Medium
No
No
5.4.18, 5.12.6, 5.15.0 04.03.2024 SB2024030419
SB2024031125
SB2024032143
and 18 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
4.20.28, 5.4.12 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
4.20.28, 5.4.12 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635
CWE-681 Medium
No
No
4.20.28, 5.4.12, 10.3.19, 11.3.2 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729
CWE-918 Medium
No
No
4.20.30, 5.4.15, 5.12.2 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU77778 - Improper input validation
CVE-2022-29546
CWE-20 Low
No
No
4.20.28, 5.4.12 28.06.2023 SB2022050443
SB20230719104
SB20231018117
and 10 more
#VU77777 - Improper input validation
CVE-2022-28366
CWE-20 Low
No
No
4.20.28, 5.4.12 28.06.2023 SB2022042155
SB2023112475
SB2023121271
and 7 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
5.12.4, 5.13.1 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU70527 - Improper input validation
CVE-2022-41966
CWE-20 Medium
Available
No
5.4.18, 5.8.0, 5.12.0 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU65486 - Improper input validation
CVE-2022-24839
CWE-20 Medium
No
No
4.20.28, 5.4.12 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649
CWE-611 Medium
No
No
4.20.28, 5.4.12 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more


Showing elements 101 - 120 out of 135