JS
Product
Jira Service Management
On CISA KEVExploited in the wild
17
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 5High 4Medium 8Low 0
Watch
Add Jira Service Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26136 | 9.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps Affected: 4.14.0 before 4.20.10; 4.14.0 before 4.20.10; 4.21.0 before 4.22.4; 4.21.0 before 4.22.4 |
| CVE-2022-0540 | 9.8 | Apr 20 | A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request Affected: before 4.13.8; before 4.13.18; 4.14.0 before 4.20.6; 4.14.0 before 4.20.6; 4.21.0 before 4.22.0; 4.21.0 before 4.22.0 |
| CVE-2020-36239 | 9.8 | Jul 29 | Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 before 8.17.0 and Jira Service… Affected: 4.14.0 before 4.17.0 |
| CVE-2019-13990 | 9.8 | Jul 26 | initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description Affected: 4.20.0; 4.20.0; 4.20.1; 4.20.1; 4.20.2; 4.20.2; +34 more |
| CVE-2023-22501 | 9.1 | Feb 1 | An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira… Affected: 5.3.0 before 5.3.3; 5.3.0 before 5.3.3; 5.4.0 before 5.4.2; 5.4.0 before 5.4.2; 5.5.0; 5.5.0 |
Showing 5