Atlassian Jira Service Management Server

Name: Atlassian Jira Service Management Server
Brand: Atlassian

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

8critical29high13medium0low

updated 2026-10-27

vulnerabilities (94)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-0540US	critical9.8	88.1% (100th)	Exploit	4.20.6	2022-04-20	5 versions
CVE-2022-26135US	medium6.5	71.6% (99th)	Exploit	unspecified	2022-06-30	6 versions
CVE-2021-44906US	critical9.8	4.58% (92nd)	Exploit	no fix	2022-03-17	≤ vers:unknown/*
CVE-2026-4800US	critical9.8	2.76% (86th)	Exploit	no fix	2026-03-31	≤ vers:unknown/*
CVE-2026-27606US	critical9.8	1.65% (76th)	Exploit	no fix	2026-02-25	≤ vers:unknown/*
CVE-2026-2332US	critical9.1	1.31% (70th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-0603US	—	1.03% (64th)	Exploit	no fix	2026-01-23	≤ vers:unknown/*
CVE-2026-54512US	—	0.94% (61st)	Exploit	no fix	2026-06-23	≤ vers:unknown/*
CVE-2026-56819US	—	0.66% (52nd)	Exploit	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-29786US	medium6.3	0.47% (40th)	Exploit	no fix	2026-03-07	≤ vers:unknown/*
CVE-2023-22501US	critical9.1	15.5% (97th)	—	no fix	2023-02-01	4 versions
CVE-2026-44492US	—	12.3% (96th)	—	no fix	2026-06-11	≤ vers:unknown/*
CVE-2022-26136US	critical9.8	5.66% (93rd)	—	4.13.22	2022-07-20	5 versions
CVE-2026-44496US	—	5.41% (93rd)	—	no fix	2026-06-11	≤ vers:unknown/*
CVE-2026-42198US	—	3.26% (88th)	—	no fix	2026-04-29	≤ vers:unknown/*
CVE-2026-25639US	—	2.80% (86th)	—	no fix	2026-02-09	≤ vers:unknown/*
CVE-2022-26137US	high8.8	2.41% (84th)	—	unspecified	2022-07-20	5 versions
CVE-2022-3517US	high7.5	2.28% (83rd)	—	no fix	2022-10-17	≤ vers:unknown/*
CVE-2026-48779US	—	1.43% (73rd)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-44494US	—	1.02% (63rd)	—	no fix	2026-06-11	≤ vers:unknown/*
CVE-2026-42587US	—	0.99% (62nd)	—	no fix	2026-05-13	≤ vers:unknown/*
CVE-2026-44249US	—	0.99% (62nd)	—	no fix	2026-06-11	≤ vers:unknown/*
CVE-2026-27601US	medium5.9	0.96% (61st)	—	no fix	2026-03-03	≤ vers:unknown/*
CVE-2026-45416US	—	0.92% (60th)	—	no fix	2026-06-12	≤ vers:unknown/*
CVE-2026-46625US	—	0.92% (60th)	—	no fix	2026-06-10	≤ vers:unknown/*
CVE-2026-42033US	—	0.87% (59th)	—	no fix	2026-04-24	≤ vers:unknown/*
CVE-2026-44495US	high7.7	0.85% (58th)	—	no fix	2026-06-11	≤ vers:unknown/*
CVE-2021-43948US	medium4.3OT elevated	0.84% (58th)	—	4.21.0	2022-02-15	unspecified → 4.21.0
CVE-2021-43950US	medium4.3	0.84% (58th)	—	4.21.0	2022-02-15	unspecified → 4.21.0
CVE-2026-41284US	—	0.84% (58th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2021-43951US	medium4.3	0.81% (57th)	—	4.21.0	2022-01-10	unspecified → 4.21.0
CVE-2021-43949US	medium4.3	0.81% (57th)	—	4.21.0	2022-01-10	unspecified → 4.21.0
CVE-2026-40984US	—	0.79% (56th)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2026-12151US	—	0.79% (56th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-3505US	—	0.79% (56th)	—	no fix	2026-04-15	≤ vers:unknown/*
CVE-2026-48043US	high7.5	0.75% (55th)	—	no fix	2026-06-12	≤ vers:unknown/*
CVE-2021-43959US	medium5.7	0.72% (54th)	—	4.20.8	2022-07-26	5 versions
CVE-2026-55685US	high7.5	0.71% (53rd)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-13676US	—	0.69% (53rd)	—	no fix	2026-06-29	≤ vers:unknown/*
CVE-2025-22157US	high8.8	0.69% (53rd)	—	no fix	2025-05-20	≤ 5.12.0 to 5.12.19
CVE-2026-44487US	high7.5	0.69% (53rd)	—	no fix	2026-06-11	≤ vers:unknown/*
CVE-2026-12143US	—	0.67% (52nd)	—	no fix	2026-06-12	≤ vers:unknown/*
CVE-2026-44488US	—	0.67% (52nd)	—	no fix	2026-06-11	≤ vers:unknown/*
CVE-2026-55833US	—	0.66% (52nd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-55831US	—	0.66% (52nd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-42041US	medium6.5	0.66% (51st)	—	no fix	2026-04-24	≤ vers:unknown/*
CVE-2022-36800US	medium4.3	0.65% (51st)	—	4.22.2	2022-08-03	unspecified → 4.22.2
CVE-2026-69152US	—	0.65% (51st)	—	no fix	2026-08-03	≤ vers:unknown/*
CVE-2026-59871US	high7.5	0.64% (51st)	—	no fix	2026-07-08	≤ vers:unknown/*
CVE-2026-59887US	—	0.64% (51st)	—	no fix	2026-07-08	≤ vers:unknown/*

showing 50 of 94

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption20 CVEs
CWE-770Allocation of Resources Without Limits or Throttling17 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')10 CVEs
CWE-287Improper Authentication6 CVEs
CWE-407Inefficient Algorithmic Complexity6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-915Improperly Controlled Modification of Dynamically-Determined Object Attributes5 CVEs
CWE-918Server-Side Request Forgery (SSRF)5 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)81 CVEs
EUEU Vulnerability Database (ENISA)13 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan