# Atlassian Jira Data Center


- [CVE-2026-21589](https://insights.sbomify.com/CVE-2026-21589/): Atlassian Multiple Products Files or Directories Accessible to External Parties (critical 9.3, exploited in the wild)
- [CVE-2021-26086](https://insights.sbomify.com/CVE-2021-26086/): Atlassian Jira Server and Data Center Path Traversal (medium 5.3, exploited in the wild)
- [CVE-2022-26136](https://insights.sbomify.com/CVE-2022-26136/): Auth bypass in Bamboo Data Center (critical 9.8)
- [CVE-2022-0540](https://insights.sbomify.com/CVE-2022-0540/): Auth bypass in Jira Core Server (critical 9.8)
- [CVE-2020-36239](https://insights.sbomify.com/CVE-2020-36239/): Deserialization in Jira Core Data Center (critical 9.8)
- [CVE-2022-26137](https://insights.sbomify.com/CVE-2022-26137/): Security feature bypass in Bamboo Data Center (high 8.8)
- [CVE-2025-22167](https://insights.sbomify.com/CVE-2025-22167/): Path traversal in Jira Software Data Center (high 8.7)
- [CVE-2019-20419](https://insights.sbomify.com/CVE-2019-20419/): Other in Jira Server (high 7.8)
- [CVE-2021-39113](https://insights.sbomify.com/CVE-2021-39113/): Missing authorization in Jira Data Center (high 7.5)
- [CVE-2020-14178](https://insights.sbomify.com/CVE-2020-14178/): Information disclosure in Jira Server (high 7.5)
- [CVE-2020-14167](https://insights.sbomify.com/CVE-2020-14167/): Denial of service in Jira Server and Data Center (high 7.5)
- [CVE-2019-20413](https://insights.sbomify.com/CVE-2019-20413/): Denial of service in Jira Server (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/atlassian/jira-data-center/