CVE-2022-36800mediumCWE-732

CVE-2022-36800: medium-severity vulnerability in Atlassian Jira Service Management Server

Published · Updated

Follow this CVE+ Monitor Jira Service Management Data Center+ Monitor Jira Service Management Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.7%
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before version 4.22.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Atlassian · Jira Service Management Data CenterAtlassian · Jira Service Management Server
Related CVEs — Atlassian Jira Service Management Server

In the same product, most dangerous first.

CVE-2026-21589CRITICALCVE-2026-21589EPSS 99.7%KEVCVE-2022-0540CRITICALCVE-2022-0540EPSS 88.1%CVE-2022-26135MEDIUMCVE-2022-26135EPSS 71.6%CVE-2020-36239CRITICALCVE-2020-36239EPSS 49.8%CVE-2023-22501CRITICALCVE-2023-22501EPSS 15.5%CVE-2022-26136CRITICALCVE-2022-26136EPSS 5.7%