CVE-2021-43948

CVE-2021-43948: vulnerability in Atlassian Jira Service Management Server

Published · Updated

Follow this CVE+ Monitor Jira Service Management Data Center+ Monitor Jira Service Management Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0.
Affected products
Atlassian · Jira Service Management Data CenterAtlassian · Jira Service Management Server
Related CVEs — Atlassian Jira Service Management Server

In the same product, most dangerous first.

CVE-2026-21589CRITICALCVE-2026-21589EPSS 99.7%KEVCVE-2022-0540CRITICALCVE-2022-0540EPSS 88.1%CVE-2022-26135MEDIUMCVE-2022-26135EPSS 71.6%CVE-2020-36239CRITICALCVE-2020-36239EPSS 49.8%CVE-2023-22501CRITICALCVE-2023-22501EPSS 15.5%CVE-2022-26136CRITICALCVE-2022-26136EPSS 5.7%