JS
Product
Jira Service Desk
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 5Medium 5Low 1
Watch
Add Jira Service Desk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21589 In wildKEV | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Affected: 3.1.0 through 4.13.27 |
| CVE-2022-26136 | 9.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps Affected: before 4.13.22; before 4.13.22 |
| CVE-2020-36239 | 9.8 | Jul 29 | Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 before 8.17.0 and Jira Service… Affected: 2.0.2 before 4.5.16; 4.6.0 before 4.13.8 |
| CVE-2022-26137 | 8.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests… Affected: before 4.13.22; before 4.13.22 |
| CVE-2019-15004 | 7.5 | Nov 7 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0… Affected: before 3.9.17; before 3.9.17; 3.10.0 before 3.16.10; 3.10.0 before 3.16.10; 4.0.0 before 4.2.6; 4.0.0 before 4.2.6; +6 more |
| CVE-2019-14994 | 7.5 | Sep 19 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version 3.16.8, from version… Affected: before 3.9.16; before 3.9.16; 3.10.0 before 3.16.8; 3.10.0 before 3.16.8; 4.0.0 before 4.1.3; 4.0.0 before 4.1.3; +6 more |
| CVE-2021-39115 | 7.2 | Sep 1 | Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run… Affected: before 4.13.9; before 4.13.9 |
| CVE-2022-26135 | 6.5 | Jun 30 | A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read… Affected: 4.0.0 before 4.13.22; 4.0.0 before 4.13.22 |
| CVE-2021-43959 | 5.7 | Jul 26 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a… Affected: before 4.13.20; before 4.13.20 |
| CVE-2019-15003 | 5.3 | Nov 7 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0… Affected: before 3.9.17; before 3.9.17; 3.10.0 before 3.16.10; 3.10.0 before 3.16.10; 4.0.0 before 4.2.6; 4.0.0 before 4.2.6; +6 more |
| CVE-2020-14166 | 4.8 | Jul 1 | The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to… Affected: before 4.10.0; before 4.10.0 |
| CVE-2020-14180 | 4.3 | Sep 21 | Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project Request-Types and… Affected: before 4.12.0 |
| CVE-2015-8481 | 3.1 | Jan 8 | Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user views an issue with… Affected: 3.0.3 |
Showing 13