# Atlassian Jira Service Management Data Center.

Every CVE that names Atlassian Jira Service Management Data Center among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Files accessible to external parties in Atlassian Bamboo Data Center and others](https://agentprime.io/advisories/CVE-2026-21589.md)
  `CVE-2026-21589` · CVE record: Atlassian Bamboo Data Center and 4 more · CVSS 9.3 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 5 Oct 2026 · Tags: Information disclosure
- [Improper authorization in Atlassian Jira Service Management Data Center](https://agentprime.io/advisories/CVE-2026-21587.md)
  `CVE-2026-21587` · CVE record: Atlassian Jira Service Management Data Center · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Broken access control
- [Improper access control in Atlassian Jira Core Data Center and others](https://agentprime.io/advisories/CVE-2025-22157.md)
  `CVE-2025-22157` · CVE record: Atlassian Jira Core Data Center and 3 more · CVSS 7.2 High · Not analysed yet · Published 20 May 2025 · Tags: Broken access control
- [Improper authentication in Atlassian Jira Service Management Data Center and others](https://agentprime.io/advisories/CVE-2023-22501.md)
  `CVE-2023-22501` · CVE record: Atlassian Jira Service Management Data Center and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 1 Feb 2023 · Tags: Authentication bypass
- [Incorrect permission assignment in Atlassian Jira Service Management Server and others](https://agentprime.io/advisories/CVE-2022-36800.md)
  `CVE-2022-36800` · CVE record: Atlassian Jira Service Management Server and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 3 Aug 2022 · Tags: Broken access control
- [Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…](https://agentprime.io/advisories/CVE-2021-43959.md)
  `CVE-2021-43959` · CVE record: Atlassian Jira Service Management Server and 1 more · No CVSS score · Not analysed yet · Published 26 Jul 2022
- [A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.](https://agentprime.io/advisories/CVE-2022-26137.md)
  `CVE-2022-26137` · CVE record: Atlassian Bamboo Server and 4 more · CVSS 8.8 High · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-180
- [A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.](https://agentprime.io/advisories/CVE-2022-26136.md)
  `CVE-2022-26136` · CVE record: Atlassian Bamboo Server and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-180
- [Server-side request forgery in Atlassian Jira Core Server and others](https://agentprime.io/advisories/CVE-2022-26135.md)
  `CVE-2022-26135` · CVE record: Atlassian Jira Core Server and 4 more · CVSS 6.5 Medium · EPSS 0.72 · Not analysed yet · Published 30 Jun 2022 · Tags: Server-side request forgery (SSRF)
- [Improper authentication in Atlassian Jira Core Server and others](https://agentprime.io/advisories/CVE-2022-0540.md)
  `CVE-2022-0540` · CVE record: Atlassian Jira Core Server and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.88 · Not analysed yet · Published 20 Apr 2022 · Tags: Authentication bypass
- [Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…](https://agentprime.io/advisories/CVE-2021-43943.md)
  `CVE-2021-43943` · CVE record: Atlassian Jira Service Management Server and 1 more · No CVSS score · Not analysed yet · Published 24 Feb 2022
- [Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…](https://agentprime.io/advisories/CVE-2021-43948.md)
  `CVE-2021-43948` · CVE record: Atlassian Jira Service Management Server and 1 more · No CVSS score · Not analysed yet · Published 15 Feb 2022
- [Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…](https://agentprime.io/advisories/CVE-2021-43950.md)
  `CVE-2021-43950` · CVE record: Atlassian Jira Service Management Server and 1 more · No CVSS score · Not analysed yet · Published 15 Feb 2022
- [Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…](https://agentprime.io/advisories/CVE-2021-43949.md)
  `CVE-2021-43949` · CVE record: Atlassian Jira Service Management Server and 1 more · No CVSS score · Not analysed yet · Published 10 Jan 2022
- [Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…](https://agentprime.io/advisories/CVE-2021-43951.md)
  `CVE-2021-43951` · CVE record: Atlassian Jira Service Management Server and 1 more · No CVSS score · Not analysed yet · Published 10 Jan 2022
- [Missing authorization in Atlassian Jira Data Center and others](https://agentprime.io/advisories/CVE-2020-36239.md)
  `CVE-2020-36239` · CVE record: Atlassian Jira Data Center and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.50 · Not analysed yet · Published 29 Jul 2021 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=atlassian-jira-service-management-data-center>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/atlassian-jira-service-management-data-center/>. Everything for agents: <https://agentprime.io/llms.txt>.