Advisories · Technology

Atlassian Jira Service Management Data Center.

Every CVE that names Atlassian Jira Service Management Data Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-21589 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Files accessible to external parties in Atlassian Bamboo Data Center and others
- Atlassian Bamboo Data Center
- Atlassian Bitbucket Data Center
- Information disclosure
Not analysed yet 5 Oct 2026
CVE-2026-21587 CVE record

CVSS 7.1 High

Improper authorization in Atlassian Jira Service Management Data Center
- Atlassian Jira Service Management Data Center
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2025-22157 CVE record

CVSS 7.2 High

Improper access control in Atlassian Jira Core Data Center and others
- Atlassian Jira Core Data Center
- Atlassian Jira Core Server
- Broken access control
Not analysed yet 20 May 2025
CVE-2023-22501 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper authentication in Atlassian Jira Service Management Data Center and others
- Atlassian Jira Service Management Data Center
- Atlassian Jira Service Management Server
- Authentication bypass
Not analysed yet 1 Feb 2023
CVE-2022-36800 CVE record

CVSS 4.3 Medium

Incorrect permission assignment in Atlassian Jira Service Management Server and others
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
- Broken access control
Not analysed yet 3 Aug 2022
CVE-2021-43959 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 26 Jul 2022
CVE-2022-26137 CVE record

CVSS 8.8 High

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2022-26136 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2022-26135 CVE record

CVSS 6.5 Medium

Server-side request forgery in Atlassian Jira Core Server and others
- Atlassian Jira Core Server
- Atlassian Jira Software Server
- Server-side request forgery (SSRF)
Not analysed yet 30 Jun 2022
CVE-2022-0540 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper authentication in Atlassian Jira Core Server and others
- Atlassian Jira Core Server
- Atlassian Jira Software Server
- Authentication bypass
Not analysed yet 20 Apr 2022
CVE-2021-43943 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 24 Feb 2022
CVE-2021-43948 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 15 Feb 2022
CVE-2021-43950 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 15 Feb 2022
CVE-2021-43949 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 10 Jan 2022
CVE-2021-43951 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 10 Jan 2022
CVE-2020-36239 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Missing authorization in Atlassian Jira Data Center and others
- Atlassian Jira Data Center
- Atlassian Jira Core Data Center
- Broken access control
Not analysed yet 29 Jul 2021