Advisories · Technology

Atlassian Jira Service Management Server.

Every CVE that names Atlassian Jira Service Management Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-22157 CVE record

CVSS 7.2 High

Improper access control in Atlassian Jira Core Data Center and others
- Atlassian Jira Core Data Center
- Atlassian Jira Core Server
- Broken access control
Not analysed yet 20 May 2025
CVE-2023-22501 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper authentication in Atlassian Jira Service Management Data Center and others
- Atlassian Jira Service Management Data Center
- Atlassian Jira Service Management Server
- Authentication bypass
Not analysed yet 1 Feb 2023
CVE-2022-36800 CVE record

CVSS 4.3 Medium

Incorrect permission assignment in Atlassian Jira Service Management Server and others
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
- Broken access control
Not analysed yet 3 Aug 2022
CVE-2021-43959 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 26 Jul 2022
CVE-2022-26137 CVE record

CVSS 8.8 High

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2022-26136 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2022-26135 CVE record

CVSS 6.5 Medium

Server-side request forgery in Atlassian Jira Core Server and others
- Atlassian Jira Core Server
- Atlassian Jira Software Server
- Server-side request forgery (SSRF)
Not analysed yet 30 Jun 2022
CVE-2022-0540 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper authentication in Atlassian Jira Core Server and others
- Atlassian Jira Core Server
- Atlassian Jira Software Server
- Authentication bypass
Not analysed yet 20 Apr 2022
CVE-2021-43943 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 24 Feb 2022
CVE-2021-43948 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 15 Feb 2022
CVE-2021-43950 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 15 Feb 2022
CVE-2021-43949 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 10 Jan 2022
CVE-2021-43951 CVE record

Atlassian Jira Service Management Server: Affected versions of Atlassian Jira Service Management Server and Data Center allow…
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
Not analysed yet 10 Jan 2022