[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOGYoV8kFwB3xJuqnSzEBca6qWR223oCXz3Zu6mwuRBc":3,"g5a-risk:CVE-2022-0540":157},{"success":4,"data":5,"meta":155},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":27,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":59,"references":60,"referencesCount":59,"weaknesses":74,"weaknessesCount":83,"isActivelyExploited":84,"cisaInfo":27,"otxData":27,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":153,"notableEvents":154},"CVE-2022-0540","What is CVE-2022-0540?","A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.","A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects A...","2022-04-20T19:15:07.68","2024-10-24T17:35:01.93",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":39,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":39,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.88057,[44,44,44,44,44,44,44],"Critical",[48,53,56],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"atlassian","jira_data_center","*","cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":51,"criteria":55,"vulnerable":4},"jira_server","cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",{"vendor":49,"product":57,"version":51,"criteria":58,"vulnerable":4},"jira_service_management","cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*",3,[61,68,71],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fconfluence.atlassian.com\u002Fdisplay\u002FJIRA\u002FJira+Security+Advisory+2022-04-20","Atlassian",[65,66,67],"Issue Tracking","Patch","Vendor Advisory",{"url":69,"source":63,"tags":70},"https:\u002F\u002Fjira.atlassian.com\u002Fbrowse\u002FJRASERVER-73650",[65,66,67],{"url":72,"source":63,"tags":73},"https:\u002F\u002Fjira.atlassian.com\u002Fbrowse\u002FJSDSERVER-11224",[65,66,67],[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2022-0540? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-0540, a critical severity cyber security vulnerability from 2022. High exploit probability (88.1%). A vulnerability in Jir...","CVE-2022-0540, CVE-2022-0540 vulnerability, CVE-2022-0540 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, atlassian security, jira_data_center vulnerability, jira_server vulnerability, jira_service_management vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2022-0540",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-0540","Cybersecurity","CVE-2022-0540, CVE-2022-0540 vulnerability, CVE-2022-0540 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112],{"Operator":27,"Negate":27,"Nodes":113},[114],{"Operator":115,"Negate":27,"CPEMatch":116},"OR",[117,120,124,128,130,132,134,137,141,145,147,151],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":118,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":119,"VersionEndIncluding":27},"E697C406-32A4-47B8-A5D7-5368EA7A871C","8.13.8",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":121,"VersionStartExcluding":27,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":27},"5FCC4AF6-596D-4476-AEF3-23217B060A25","8.14.0","8.20.6",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":126,"VersionEndExcluding":127,"VersionEndIncluding":27},"2FB66C54-EF31-4E7C-8E17-32A108FEC911","8.21.0","8.22.0",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":119,"VersionEndIncluding":27},"EEDC4C09-8764-41F0-8757-FDED8C8FA0EF",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":27},"56F298E4-0956-4560-880D-47BA97D1D2EA",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":126,"VersionEndExcluding":127,"VersionEndIncluding":27},"4016C4DC-25F7-4F15-84CF-19547F5B9720",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":135,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":136,"VersionEndIncluding":27},"135F2D8C-19FD-4A8C-A3C1-6A940EEED5BE","4.13.8",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":140,"VersionEndIncluding":27},"cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*","F5D099EC-2EC5-4A83-85F4-F61371821CC5","4.13.18",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":142,"VersionStartExcluding":27,"VersionStartIncluding":143,"VersionEndExcluding":144,"VersionEndIncluding":27},"97EB58EA-E57A-4AFE-8627-F772A252A60B","4.14.0","4.20.6",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":146,"VersionStartExcluding":27,"VersionStartIncluding":143,"VersionEndExcluding":144,"VersionEndIncluding":27},"ED2F696D-6C18-418F-BFB8-721BD3762653",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":148,"VersionStartExcluding":27,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":27},"E75D38BE-2949-444B-A203-D136F48D1DBA","4.21.0","4.22.0",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":152,"VersionStartExcluding":27,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":27},"24A229DD-9707-42E8-97A7-91EE23970DE4",[],[],{"lastModified":11,"cacheTime":156,"version":37},1792371314871,{"score":158,"band":46,"action":159,"scoredAt":160},90,"Emergency patch","2026-10-16T06:54:16.062675+00:00"]