RCE (Remote Code Execution) org.bouncycastle:bcprov-lts8on Dependency in Jira Software Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in versions 9.12.1, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.7 and...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Jira Software Data Center

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12803 was introduced in 9.12.1 and later of Jira Software Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Jira Software Data Center and Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12816 was introduced in 9.12.1 and later of Jira Software Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

DoS (Denial of Service) Apache Tomcat Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability known as CVE-2026-58059 was introduced in 9.12.1 and later of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

BASM (Broken Authentication & Session Management) org.bouncycastle:bcprov-jdk18on Dependency in Jira Software Data Center

This is a vulnerability in a non-Atlassian Jira Software dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 9.12.1, 10.0.0, 10.1.1,...

RCE (Remote Code Execution) org.bouncycastle:bcprov-lts8on Dependency in Jira Software Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in versions 9.12.1, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.7 and...

SSRF (Server-Side Request Forgery) fast-uri Dependency in Jira Software Data Center

This High severity SSRF Server-Side Request Forgery vulnerability was introduced in version 10.3.23 of Jira Software Data Center. This SSRF Server-Side Request Forgery vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N allows an unauthenticat...

DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.12.2, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector o...

SSRF (Server-Side Request Forgery) fast-uri Dependency in Jira Software Data Center

This High severity SSRF Server-Side Request Forgery vulnerability was introduced in versions 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This SSRF Server-Side Request Forgery vulnerability, with a CVSS Score of 7.5 and a CVSS...

SSRF (Server-Side Request Forgery) fast-uri Dependency in Jira Software Data Center

This High severity SSRF Server-Side Request Forgery vulnerability was introduced in versions 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This SSRF Server-Side Request Forgery vulnerability, with a CVSS Score of 7.5 and a CVSS...

DoS (Denial of Service) Apache Tomcat Dependency in Jira Software Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-13506 was introduced in 10.0.0 and later of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

CSRF (Cross-Site Request Forgery) nanoid Dependency in Jira Software Data Center

This High severity CSRF Cross-Site Request Forgery vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This CSRF Cross-Site Request Forgery vulnerability, with a CVSS Score of 7.4 and a...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Jira Software Data Center and Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-59642 was introduced in 10.0.0 and later of Jira Software Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Jira Software Data Center

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12802 was introduced in 10.0.0 and later of Jira Software Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

DoS (Denial of Service) nanoid Dependency in Jira Software Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-67214 was introduced in 10.0.0 and later of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:...

File Inclusion postcss Dependency in Jira Software Data Center

This High severity File Inclusion vulnerability was introduced in versions 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This File Inclusion vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

DOM-based XSS tinymce Dependency in Jira Software Data Center

This High severity DOM-based XSS vulnerability was introduced in versions 10.0.1, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, and 11.1.0 of Jira Software Data Center. This DOM-based XSS vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

DOM-based XSS tinymce Dependency in Jira Software Data Center

This High severity DOM-based XSS vulnerability was introduced in versions 10.0.1, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, and 11.1.0 of Jira Software Data Center. This DOM-based XSS vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

DOM-based XSS tinymce Dependency in Jira Software Data Center

This High severity DOM-based XSS vulnerability was introduced in versions 10.0.1, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, and 11.1.0 of Jira Software Data Center. This DOM-based XSS vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

DoS (Denial of Service) com.fasterxml.jackson.core:jackson-databind Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.12.1, 9.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.1 and...