Atlassian Jira
productRUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
31critical89high75medium1low
updated 2026-10-26
01
vulnerabilities (335)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2023-22518US | critical9.8OT critical | KEV |
| CVE-2023-22527US | critical9.8OT critical | KEV |
| CVE-2023-46604US | critical9.8OT critical | KEV |
| CVE-2022-22965US | critical9.8OT critical | KEV |
| CVE-2026-21589US | high7.5OT critical | KEV |
| CVE-2019-11581US | critical9.8OT critical | KEV |
| CVE-2020-14181US | medium5.3 | Exploit |
| CVE-2019-8451US | medium6.5 | Exploit |
| CVE-2025-66516US | critical9.8 | Exploit |
| CVE-2022-0540US | critical9.8 | Exploit |
| CVE-2019-8449US | medium5.3OT high | Exploit |
| CVE-2025-55752US | — | Exploit |
| CVE-2019-3403US | medium5.3OT high | Exploit |
| CVE-2025-54988US | — | Exploit |
| CVE-2022-41903US | critical9.8 | Exploit |
| CVE-2025-48976US | — | Exploit |
| CVE-2025-48988US | — | Exploit |
| CVE-2023-22524US | critical9.8 | Exploit |
| CVE-2019-13990US | critical9.8 | Exploit |
| CVE-2022-22978US | critical9.8OT high | Exploit |
| CVE-2022-46175US | high8.8 | Exploit |
| CVE-2021-44906US | critical9.8 | Exploit |
| CVE-2021-23358US | high7.2 | Exploit |
| CVE-2025-8671US | — | Exploit |
| CVE-2025-49125US | —OT elevated | Exploit |
| CVE-2022-31692US | critical9.8OT high | Exploit |
| CVE-2025-46701US | — | Exploit |
| CVE-2026-4800US | critical9.8 | Exploit |
| CVE-2026-40175US | medium4.8 | Exploit |
| CVE-2022-25927US | high7.5 | Exploit |
| CVE-2021-22569US | medium5.5 | Exploit |
| CVE-2026-27606US | critical9.8 | Exploit |
| CVE-2026-2332US | critical9.1 | Exploit |
| CVE-2023-3635US | high7.5 | Exploit |
| CVE-2024-47875US | medium6.1 | Exploit |
| CVE-2025-55163US | high7.5 | Exploit |
| CVE-2026-0603US | — | Exploit |
| CVE-2024-43788US | medium6.1 | Exploit |
| CVE-2026-54512US | — | Exploit |
| CVE-2022-3509US | high7.5 | Exploit |
| CVE-2025-27152US | medium5.3 | Exploit |
| CVE-2025-52999US | — | Exploit |
| CVE-2026-42588US | — | Exploit |
| CVE-2026-56819US | — | Exploit |
| CVE-2025-22223US | — | Exploit |
| CVE-2026-22732US | — | Exploit |
| CVE-2025-41249US | —OT elevated | Exploit |
| CVE-2026-29786US | medium6.3 | Exploit |
| CVE-2026-23745US | medium6.1 | Exploit |
| CVE-2026-58062US | critical9.1 | Exploit |
showing 50 of 335
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-400Uncontrolled Resource Consumption52 CVEs
- CWE-770Allocation of Resources Without Limits or Throttling34 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')26 CVEs
- CWE-20Improper Input Validation22 CVEs
- CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')19 CVEs
- CWE-1333Inefficient Regular Expression Complexity18 CVEs
- CWE-863Incorrect Authorization13 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')12 CVEs
03
sources (4)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)250 CVEs
- NLNCSC-NL (CSAF)107 CVEs
- EUEU Vulnerability Database (ENISA)52 CVEs
- RUBDU (FSTEC Data Security Threats Database)8 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan