How many Atlassian Jira Server CVEs are in CISA KEV?

Yes — 2 of Atlassian Jira Server's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Atlassian Jira Server are affected?

398 distinct Atlassian Jira Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Atlassian Jira Server CVEs?

Atlassian Jira Server's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-287 (Improper Authentication), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-639 (Authorization Bypass Through User-Controlled Key).

How many critical Atlassian Jira Server vulnerabilities are there?

Atlassian Jira Server has 5 critical and 28 high-severity CVEs.

What is the average severity of Atlassian Jira Server CVEs?

The average CVSS base score across Atlassian Jira Server's scored CVEs is 5.9.

Atlassian Jira Server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Atlassian Jira Server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Atlassian Jira Server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Atlassian Jira Server has 160 published CVE records since 2016, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 5.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Atlassian Jira Server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Atlassian Jira Server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High28

Medium124

Low3

In CISA’s Known Exploited Vulnerabilities catalog

2 of Atlassian Jira Server's CVEs are confirmed exploited in the wild.

Public exploits

6 of Atlassian Jira Server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Atlassian Jira Server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 8.6.042 CVEs
>= 8.14.041 CVEs
>= 8.0.013 CVEs
8.14.0 <= v < 8.15.19 CVEs
< 8.15.18 CVEs
< 8.13.37 CVEs
< 8.13.57 CVEs
7.7.0 <= v < 7.7.57 CVEs
< 8.13.126 CVEs
< 8.13.66 CVEs
< 8.15.06 CVEs
< 8.5.146 CVEs

Common weakness types

The CWE weakness categories most often found in Atlassian Jira Server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Atlassian Jira Server CVEs were published each year.

2016

2018

2019

2020

2021

2022

2024

Other Atlassian products

Browse vulnerabilities for other products by Atlassian.

Jira156 CVEs Jira Data Center104 CVEs Confluence Server53 CVEs crucible53 CVEs fisheye53 CVEs Confluence Data Center45 CVEs jira software data center45 CVEs data center39 CVEs

Frequently asked questions

Common questions about Atlassian Jira Server vulnerabilities.

How many CVEs does Atlassian Jira Server have?: Atlassian Jira Server has 160 published CVE records since 2016.
How many Atlassian Jira Server CVEs are in CISA KEV?: Yes — 2 of Atlassian Jira Server's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Atlassian Jira Server vulnerabilities?: Yes — 6 of Atlassian Jira Server's CVEs have a known public exploit.
Which versions of Atlassian Jira Server are affected?: 398 distinct Atlassian Jira Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Atlassian Jira Server CVEs?: Atlassian Jira Server's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-287 (Improper Authentication), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-639 (Authorization Bypass Through User-Controlled Key).
How many critical Atlassian Jira Server vulnerabilities are there?: Atlassian Jira Server has 5 critical and 28 high-severity CVEs.
What is the average severity of Atlassian Jira Server CVEs?: The average CVSS base score across Atlassian Jira Server's scored CVEs is 5.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Atlassian Jira Server vulnerabilities

Monitor new Atlassian Jira Server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing