JS
Product
Jira Service Desk
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 5Medium 5Low 1
Watch
Add Jira Service Desk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21589 In wildKEV | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Affected: 3.1.0 through 4.13.27 |
| CVE-2022-26137 | 8.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests… Affected: before 4.13.22; before 4.13.22 |
| CVE-2019-15004 | 7.5 | Nov 7 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0… Affected: before 3.9.17; before 3.9.17; 3.10.0 before 3.16.10; 3.10.0 before 3.16.10; 4.0.0 before 4.2.6; 4.0.0 before 4.2.6; +6 more |
| CVE-2019-14994 | 7.5 | Sep 19 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version 3.16.8, from version… Affected: before 3.9.16; before 3.9.16; 3.10.0 before 3.16.8; 3.10.0 before 3.16.8; 4.0.0 before 4.1.3; 4.0.0 before 4.1.3; +6 more |
| CVE-2021-39115 | 7.2 | Sep 1 | Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run… Affected: before 4.13.9; before 4.13.9 |
Showing 5