JS
Product
Jira Service Desk
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 5Medium 5Low 1
Watch
Add Jira Service Desk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26135 | 6.5 | Jun 30 | A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read… Affected: 4.0.0 before 4.13.22; 4.0.0 before 4.13.22 |
| CVE-2021-43959 | 5.7 | Jul 26 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a… Affected: before 4.13.20; before 4.13.20 |
| CVE-2019-15003 | 5.3 | Nov 7 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0… Affected: before 3.9.17; before 3.9.17; 3.10.0 before 3.16.10; 3.10.0 before 3.16.10; 4.0.0 before 4.2.6; 4.0.0 before 4.2.6; +6 more |
| CVE-2020-14166 | 4.8 | Jul 1 | The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to… Affected: before 4.10.0; before 4.10.0 |
| CVE-2020-14180 | 4.3 | Sep 21 | Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project Request-Types and… Affected: before 4.12.0 |
Showing 5