atlassian jira software data center

Name: atlassian jira software data center
Brand: atlassian

productUS

cpe:2.3:a:atlassian:jira_software_data_center:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

2critical8high29medium0low

updated 2026-10-28

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-14178US	high7.5	3.05% (88th)	—	7.13.7	2020-09-01	< 7.13.7
CVE-2020-14172US	critical9.8	2.50% (85th)	—	8.5.0	2020-07-03	3 versions
CVE-2019-20409US	critical9.8	2.48% (85th)	—	8.8.0	2020-06-23	< 8.8.0
CVE-2019-20899US	medium5.3	2.14% (82nd)	—	8.5.4	2020-07-13	< 8.5.4
CVE-2020-14167US	high7.5	2.13% (82nd)	—	7.13.14	2020-07-01	< 7.13.14
CVE-2019-20413US	high7.5	2.13% (82nd)	—	7.13.9	2020-06-29	< 7.13.9
CVE-2020-36235US	medium5.3	2.00% (81st)	—	8.13.2	2021-02-15	2 versions
CVE-2019-20412US	medium5.3	1.88% (79th)	—	7.13.9	2020-06-29	< 7.13.9
CVE-2019-20897US	medium6.5	1.88% (79th)	—	8.5.4	2020-07-13	< 8.5.4
CVE-2019-20410US	medium6.5	1.86% (79th)	—	7.6.17	2020-06-29	< 7.6.17
CVE-2020-14168US	medium5.9OT elevated	1.68% (77th)	—	7.13.14	2020-07-01	< 7.13.14
CVE-2021-41307US	high7.5	1.67% (77th)	—	8.20.0	2021-10-26	2 versions
CVE-2021-41306US	high7.5	1.62% (76th)	—	8.13.12	2021-10-26	2 versions
CVE-2020-4029US	medium4.3	1.45% (73rd)	—	8.5.5	2020-07-01	< 8.5.5
CVE-2020-36236US	medium6.1	1.32% (71st)	—	8.5.11	2021-02-15	2 versions
CVE-2021-39127US	medium5.3	1.31% (71st)	—	8.5.10	2021-10-21	< 8.5.10
CVE-2019-20898US	high7.5	1.30% (70th)	—	8.8.0	2020-07-13	< 8.8.0
CVE-2020-36231US	medium4.3	1.21% (68th)	—	8.5.10	2021-02-02	< 8.5.10
CVE-2020-14174US	medium4.3	1.21% (68th)	—	7.13.16	2020-07-13	< 7.13.16
CVE-2021-41305US	high7.5	1.21% (68th)	—	8.13.12	2021-10-26	< 8.13.12
CVE-2019-20106US	medium4.3OT elevated	1.19% (68th)	—	7.13.12	2020-02-06	< 7.13.12
CVE-2020-4022US	medium6.1	1.14% (66th)	—	8.5.5	2020-07-01	< 8.5.5
CVE-2019-20414US	medium5.4	1.05% (64th)	—	7.13.9	2020-06-29	< 7.13.9
CVE-2019-20418US	medium6.5	1.02% (63rd)	—	8.8.0	2020-07-03	< 8.8.0
CVE-2021-41308US	medium6.5	1.01% (63rd)	—	8.6.0	2021-10-26	2 versions
CVE-2020-14165US	medium5.3	1.00% (63rd)	—	8.9.0	2020-07-01	< 8.9.0
CVE-2020-4021US	medium5.4	1.00% (63rd)	—	7.13.16	2020-06-01	< 7.13.16
CVE-2020-4024US	medium5.4	0.93% (60th)	—	8.5.5	2020-07-01	< 8.5.5
CVE-2020-4025US	medium4.8	0.92% (60th)	—	8.5.5	2020-07-01	< 8.5.5
CVE-2020-14173US	medium5.4	0.89% (59th)	—	8.5.4	2020-07-03	< 8.5.4
CVE-2021-41311US	high7.5	0.86% (58th)	—	8.19.1	2021-12-08	< 8.19.1
CVE-2020-4028US	medium5.3	0.86% (58th)	—	8.9.1	2020-06-23	< 8.9.1
CVE-2021-41309US	medium5.3	0.83% (57th)	—	8.19.1	2021-12-08	< 8.19.1
CVE-2019-20402US	medium4.9	0.77% (55th)	—	8.6.0	2020-02-06	< 8.6.0
CVE-2020-14169US	medium6.1	0.77% (55th)	—	8.9.1	2020-07-01	< 8.9.1
CVE-2020-14164US	medium6.1	0.73% (54th)	—	8.8.2	2020-07-01	< 8.8.2
CVE-2021-41310US	medium6.1	0.71% (54th)	—	8.19.1	2021-11-01	3 versions
CVE-2019-20415US	medium4.3	0.62% (50th)	—	7.13.3	2020-06-30	< 7.13.3
CVE-2019-20416US	medium4.8	0.59% (48th)	—	8.3.0	2020-06-30	< 8.3.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11 CVEs
CWE-639Authorization Bypass Through User-Controlled Key5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-276Incorrect Default Permissions1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan