Jira Service Management vulnerabilities | LiveThreat CVE Feed

Product

Jira Service Management

by Atlassian · last CVE Oct 5, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities17 In the news8 Timeline

Severity mix

Critical 5High 4Medium 8Low 0

Severity

All severities17 Critical5 High4 Medium8 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Jira Service Management to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-26135	6.5	72%	Jun 30	A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read… Affected: 4.14.0 before 4.20.10; 4.14.0 before 4.20.10; 4.21.0 before 4.22.4; 4.21.0 before 4.22.4
CVE-2021-43959	5.7	1%	Jul 26	Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a… Affected: 4.14.0 before 4.20.8; 4.14.0 before 4.20.8; 4.21.0 before 4.22.2; 4.21.0 before 4.22.2
CVE-2021-43943	4.8	0%	Feb 24	Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privileges to inject arbitrary HTML or JavaScript via a Cross-Site… Affected: before 4.21.0; before 4.21.0
CVE-2022-36800	4.3	1%	Aug 3	Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information… Affected: before 4.22.2; before 4.22.2
CVE-2021-43948	4.3	1%	Feb 15	Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper… Affected: before 4.21.0; before 4.21.0
CVE-2021-43950	4.3	1%	Feb 15	Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source configuration information via a Broken… Affected: before 4.21.0; before 4.21.0
CVE-2021-43951	4.3	1%	Jan 10	Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import configuration details via an Information… Affected: before 4.21.0; before 4.21.0
CVE-2021-43949	4.3	1%	Jan 10	Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control… Affected: before 4.21.0; before 4.21.0