JS
Product
Jira Service Management Data Center
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Jira Service Management Data Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21589 In wildKEV | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Affected: All other versions |
| CVE-2025-22157 | 8.8 | May 20 | This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0,… Affected: 10.5.0; 10.4.0 to 10.4.1; 10.3.0 to 10.3.4; 5.12.0 to 5.12.19 |
| CVE-2026-21587 | 7.1 | Sep 15 | This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center Affected: 11.3.0 to 11.3.10 |
| CVE-2022-36800 | 4.3 | Aug 3 | Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information… Affected: before 4.22.2 |
Showing 4