How many CVEs does JetBrains have?

JetBrains has 580 published CVE records since 2015, including 133 in the last two years.

How many JetBrains CVEs are in CISA KEV?

Yes — 3 of JetBrains's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which JetBrains products have the most CVEs?

The JetBrains products with the most published CVEs are TeamCity, YouTrack, IntelliJ IDEA, Hub, Ktor.

What are the most common weakness types in JetBrains CVEs?

JetBrains's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-532 (Insertion of Sensitive Information into Log File), CWE-862 (Missing Authorization).

Are there public exploits for JetBrains vulnerabilities?

Yes — 7 of JetBrains's CVEs have a known public exploit.

How many critical JetBrains vulnerabilities are there?

JetBrains has 64 critical and 178 high-severity CVEs.

What is the average severity of JetBrains CVEs?

The average CVSS base score across JetBrains's scored CVEs is 6.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

580 CVEs

3 in CISA KEV

JetBrains Vulnerabilities

Name: JetBrains vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for JetBrains.

580

Total CVEs

Published

3

In CISA KEV

Exploited in the wild

7

Public exploits

PoC or exploit code

6.6

Avg CVSS

2015–2026

Overview

JetBrains has 580 published CVE records since 2015, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting JetBrains products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on JetBrains's vulnerability posture, as a share of its 580 published CVEs.

Average CVSS: 6.6
Critical / high: 42%
Actively exploited (KEV): 1%
Public exploit available: 1%
Patch available: 97%

Severity and exploitation

How the CVSS severity of JetBrains's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical64

High178

Medium314

Low24

In CISA’s Known Exploited Vulnerabilities catalog

3

3 of JetBrains's CVEs are confirmed exploited in the wild.

Public exploits

7

7 of JetBrains's CVEs have a known public exploit available.

Most affected products

The JetBrains products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in JetBrains CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish JetBrains CVE records.

Disclosure activity by year

How many JetBrains CVEs were published each year.

2019

58

2020

58

2021

95

2022

75

2023

54

2024

103

2025

83

2026

50

Latest JetBrains CVEs

The most recently disclosed vulnerabilities affecting JetBrains.

Critical vulnerability · 2026-07-14
Critical · CVSS 10.0
EPSS 0.3%2026-07-14
Medium vulnerability · 2026-07-10
Medium · CVSS 6.1
EPSS 0.4%2026-07-10
High vulnerability · 2026-07-10
High · CVSS 8.1
EPSS 0.2%2026-07-10
High vulnerability · 2026-07-10
High · CVSS 8.1
EPSS 0.2%2026-07-10
High vulnerability · 2026-07-10
High · CVSS 7.3
EPSS 0.2%2026-07-10
High vulnerability · 2026-07-10
High · CVSS 8.8
EPSS 0.3%2026-07-10
Critical vulnerability · 2026-07-10
Critical · CVSS 9.8
EPSS 0.4%2026-07-10
Low vulnerability · 2026-07-10
Low · CVSS 3.5
EPSS 0.1%2026-07-10
Critical vulnerability · 2026-06-26
CWE-502
Critical · CVSS 9.8
EPSS 0.2%2026-06-26
Critical vulnerability · 2026-06-26
CWE-1321
Critical · CVSS 9.8
EPSS 0.2%2026-06-26
Medium vulnerability · 2026-06-26
Medium · CVSS 5.3
EPSS 0.2%2026-06-26
Medium vulnerability · 2026-06-26
Medium · CVSS 5.3
EPSS 0.2%2026-06-26

Track new JetBrains CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor JetBrains CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

FreeBSD603 CVEs Symantec598 CVEs itsourcecode589 CVEs openclaw588 CVEs Linux Foundation579 CVEs TP-Link570 CVEs TYPO3565 CVEs zohocorp562 CVEs

Browse all vendors

Frequently asked questions

Common questions about JetBrains vulnerabilities.

How many CVEs does JetBrains have?: JetBrains has 580 published CVE records since 2015, including 133 in the last two years.
How many JetBrains CVEs are in CISA KEV?: Yes — 3 of JetBrains's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which JetBrains products have the most CVEs?: The JetBrains products with the most published CVEs are TeamCity, YouTrack, IntelliJ IDEA, Hub, Ktor.
What are the most common weakness types in JetBrains CVEs?: JetBrains's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-532 (Insertion of Sensitive Information into Log File), CWE-862 (Missing Authorization).
Are there public exploits for JetBrains vulnerabilities?: Yes — 7 of JetBrains's CVEs have a known public exploit.
How many critical JetBrains vulnerabilities are there?: JetBrains has 64 critical and 178 high-severity CVEs.
What is the average severity of JetBrains CVEs?: The average CVSS base score across JetBrains's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track JetBrains vulnerabilities

Monitor new JetBrains vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing