JS
Product
Jira Service Management
On CISA KEVExploited in the wild
17
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 5High 4Medium 8Low 0
Watch
Add Jira Service Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21589 In wildKEV | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Affected: 4.14.0 before 5.12.40; 5.13.0 before 10.3.26; 10.4.0 before 11.3.12 |
| CVE-2024-21683 | 8.8 | May 21 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server Affected: 5.4.0 before 5.4.21; 5.12.0 before 5.12.8; 5.15.2 before 5.16.0; 5.4.0 before 5.4.21; 5.12.0 before 5.12.8; 5.15.2 |
| CVE-2022-26137 | 8.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests… Affected: 4.14.0 before 4.20.10; 4.14.0 before 4.20.10; 4.21.0 before 4.22.4; 4.21.0 before 4.22.4 |
| CVE-2021-39115 | 7.2 | Sep 1 | Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run… Affected: 4.14.0 before 4.18.0; 4.14.0 before 4.18.0 |
Showing 4