JS
Product
Jira Software Data Center
On CISA KEVExploited in the wild
40
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 9Medium 29Low 0
Watch
Add Jira Software Data Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21589 In wildKEV | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Affected: All other versions |
| CVE-2021-41311 | 7.5 | Dec 8 | Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify projects' Users &… Affected: before 8.19.1 |
| CVE-2021-41307 | 7.5 | Oct 26 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via an Insecure Direct… Affected: before 8.13.12; 8.14.0 before 8.20.0 |
| CVE-2021-41306 | 7.5 | Oct 26 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References… Affected: before 8.13.12; 8.14.0 before 8.20.0 |
| CVE-2021-41305 | 7.5 | Oct 26 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of private projects and filters via an Insecure Direct Object… Affected: before 8.13.12 |
| CVE-2020-14178 | 7.5 | Sep 1 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY… Affected: before 7.13.7 |
| CVE-2019-20898 | 7.5 | Jul 13 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen Affected: before 8.8.0 |
| CVE-2020-14167 | 7.5 | Jul 1 | The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows… Affected: before 7.13.14 |
| CVE-2019-20413 | 7.5 | Jun 29 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability on the… Affected: before 7.13.9 |
Showing 9