Atlassian Jira Software Data Center
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-21589 | | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Ba | CRITICAL 9.3 | 99 % | KEV | |
| CVE-2025-22167 | 11.0.0 to 11.0.1 ; 10.3.0 to 10.3.11 ; 9.12.0 to 9.12.27 | This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of | HIGH 8.7 | 0.5 % | ||
| CVE-2022-26137 | | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked w | HIGH 8.8 | 2.4 % | ||
| CVE-2022-26136 | | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third p | CRITICAL 9.8 | 5.7 % | ||
| CVE-2022-26135 | 8.0.0 – < unspecified ; unspecified – < 8.13.22 ; 8.14.0 – < unspecified ; … | A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the si | MEDIUM 6.5 | 72 % | ||
| CVE-2022-0540 | unspecified – < 8.13.18 ; 8.14.0 – < unspecified ; unspecified – < 8.20.6 ; … | A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP reques | CRITICAL 9.8 | 88 % | ||
| CVE-2020-36239 | 6.3.0 – < unspecified ; unspecified – < 8.5.16 ; 8.6.0 – < unspecified ; … | Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 b | CRITICAL 9.8 | 50 % |