Known vulnerabilities in Jira Service Management Data Center - page 7

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:jira_service_management_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 135
Public exploits: 24
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jira Service Management Data Center Jira Service Management Data Center is affected by 135 known vulnerabilities: 2 critical, 12 high, 106 medium, 15 low Critical High Medium Low

Vulnerabilities (135)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75044 - Uncontrolled Recursion
CVE-2023-1370
CWE-674 Medium
No
No
4.20.27, 10.3.17, 11.3.3 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Available
No
5.4.14, 5.11.2, 5.12.0, 11.3.4 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69670 - Improper input validation
CVE-2022-3509
CWE-20 Medium
No
No
4.20.27, 5.4.11 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171
CWE-20 Medium
No
No
4.20.27, 5.4.11 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
4.20.27, 5.4.11 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
4.20.27, 5.4.11 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU65499 - Improper input validation
CVE-2021-31684
CWE-20 Medium
No
No
4.20.27, 4.20.28, 5.4.12 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU65121 - Server-Side Request Forgery (SSRF)
CVE-2022-26135
CWE-918 Medium
Available
No
4.13.22, 4.20.10, 4.22.4, 5.0.0 11.07.2022 SB2022071179
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647
CWE-502 Medium
No
No
4.20.25, 5.4.9, 5.7.2, 5.8.2, 5.9.2, 5.10.1, 5.11.0 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU62540 - Improper Authentication
CVE-2022-0540
CWE-287 High
Available
No
4.13.18, 4.20.6, 4.22.0 25.04.2022 SB2022042501
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
4.20.27, 5.4.11 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60181 - Resource Management Errors
CVE-2021-22569
CWE-399 Medium
Available
No
4.20.27, 5.4.11 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877
CWE-502 Medium
No
No
4.20.27 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more
#VU55284 - Missing Authentication for Critical Function
CVE-2020-36239
CWE-306 Critical
No
No
4.5.16, 4.13.8, 4.17.0 24.07.2021 SB2021072401
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990
CWE-611 Medium
No
No
4.20.26, 5.4.10, 5.7.2, 5.8.2, 5.9.2, 5.10.1 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more


Showing elements 121 - 140 out of 135