Jira Service Desk (Atlassian) - vulnerabilities (CVEs)
13 CVEs, 1 in the last 30 days, 398 known versions, newest CVE from 2026-10-05. Vendor: Atlassian.
CVEs of Jira Service Desk
- CVE-2026-21589 - CVSS 9.3 (critical), 2026-10-05: This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center.…
- CVE-2021-43959 - CVSS 5.7 (medium), 2022-07-26: Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network…
- CVE-2022-26136 - CVSS 9.8 (critical), 2022-07-20: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The…
- CVE-2022-26137 - CVSS 8.8 (high), 2022-07-20: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the…
- CVE-2022-26135 - CVSS 6.5 (medium), 2022-06-30: A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to…
- CVE-2021-39115 - CVSS 7.2 (high), 2021-09-01: Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary…
- CVE-2020-36239 - CVSS 9.8 (critical), 2021-07-29: Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 before 8.17.0 and…
- CVE-2020-14180 - CVSS 4.3 (medium), 2020-09-21: Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project…
- CVE-2020-14166 - CVSS 4.8 (medium), 2020-07-01: The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project…
- CVE-2019-15003 - CVSS 5.3 (medium), 2019-11-07: The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0…
- CVE-2019-15004 - CVSS 7.5 (high), 2019-11-07: The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0…
- CVE-2019-14994 - CVSS 7.5 (high), 2019-09-19: The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version…
- CVE-2015-8481 - CVSS 3.1 (low), 2016-01-08: Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user…
