Advisories · Technology

Atlassian Jira Software Server.

Every CVE that names Atlassian Jira Software Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-22167 CVE record

CVSS 8.7 High

Path traversal in Atlassian Jira Software Data Center and others
- Atlassian Jira Software Data Center
- Atlassian Jira Software Server
- Path traversal
Not analysed yet 22 Oct 2025
CVE-2022-26137 CVE record

CVSS 8.8 High

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2022-26136 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2022-26135 CVE record

CVSS 6.5 Medium

Server-side request forgery in Atlassian Jira Core Server and others
- Atlassian Jira Core Server
- Atlassian Jira Software Server
- Server-side request forgery (SSRF)
Not analysed yet 30 Jun 2022
CVE-2022-0540 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper authentication in Atlassian Jira Core Server and others
- Atlassian Jira Core Server
- Atlassian Jira Software Server
- Authentication bypass
Not analysed yet 20 Apr 2022