Atlassian vulnerabilities

Products

• Jira 156
• Jira Server 144
• Jira Server 99
• Jira Data Center 92
• Jira Data Center 64
• Crucible 54
• Fisheye 54
• Confluence Server 49
• Confluence Server 40
• Confluence Data Center 39
• Confluence Data Center 39
• Jira Software Data Center 39
• Data Center 38
• Bamboo 28
• Crowd 25
• Confluence 21
• Bitbucket 20
• Bitbucket Server 18
• Jira Service Management 17
• Fisheye And Crucible 16
• Jira Service Management Data Center 16
• Sourcetree 16
• Jira Server And Data Center 15
• Bitbucket Data Center 14
• Jira Align 13
• Jira Align 13
• Jira Service Desk 13
• Jira Service Management Server 13
• Bamboo Data Center 10
• Sourcetree For Windows 8
• Application Links 7
• Crowd Data Center 7
• Jira Software Data Center 7
• Bamboo Server 6
• Application Links 5
• Fisheye And Crucible 5
• Hipchat 5
• Jira Core Server 5
• Jira Service Desk Server 5
• Jira Software Server 5

Show 30 moreShow less

• Agiloft 4
• Bitbucket Data Center 4
• Crowd Server 4
• Floodlight 4
• Jira Service Desk Data Center 4
• Sourcetree For Mac 4
• Sourcetree For Macos 4
• Application Links 3
• Bamboo Data Center 3
• Bamboo Server 3
• Companion 3
• Confluence Data Center And Server 3
• Hipchat Server 3
• Jira Core Data Center 3
• Questions For Confluence 3
• Universal Plugin Manager 3
• Universal Plugin Manager 3
• Assets Discovery Data Center 2
• Assets Discovery Data Center 2
• Connect Spring Boot (acsb) 2
• Crucible 2
• Bitbucket Server 2
• Companion App 2
• Confluence Questions 2
• Confluence Server And Data Center 2
• Connect Spring Boot 2
• Crowd2 2
• Floodlight Controller 2
• Jira Core 2
• Saml Single Sign On 2

Newest

• atlassian bamboo, bamboo data center, bitbucket data center +14 more +16 more h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira... CVE-2026-21589 In KEVPublic exploit EPSS 99.7% 9.3 CriticalOctober 5, 2026
• atlassian confluence data center This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1,... CVE-2026-21588 7.1 HighSeptember 15, 2026
• atlassian jira service management data center This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira... CVE-2026-21587 7.1 HighSeptember 15, 2026
• atlassian confluence data center This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0,... CVE-2026-21586 7.1 HighSeptember 15, 2026
• atlassian bamboo, bamboo data center +1 more This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0... CVE-2026-21584 7.6 HighAugust 18, 2026
• atlassian crowd data center This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE... CVE-2026-21582 8.8 HighAugust 18, 2026
• atlassian confluence data center, confluence server +1 more This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration... CVE-2026-21580 8.6 HighAugust 18, 2026
• atlassian confluence data center This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0... CVE-2026-21579 8.2 HighJuly 21, 2026
• atlassian confluence data center This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0,... CVE-2026-21577 7.1 HighJuly 21, 2026
• atlassian sourcetree, sourcetree for mac +1 more This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of... CVE-2026-21575 7.1 HighJuly 21, 2026
• atlassian bamboo, bamboo data center +1 more This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0... CVE-2026-21571 9.4 CriticalApril 21, 2026
• atlassian bamboo, bamboo data center +1 more This High severity RCE (Remote Code Execution)  vulnerability was introduced in versions 9.6.0,... CVE-2026-21570 8.6 HighMarch 17, 2026
• atlassian crowd, crowd data center +1 more This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7... CVE-2026-21569 7.9 HighJanuary 28, 2026
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected... CVE-2025-22178 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected... CVE-2025-22174 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected... CVE-2025-22173 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient... CVE-2025-22170 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected... CVE-2025-22169 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected... CVE-2025-22172 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected... CVE-2025-22176 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the... CVE-2025-22171 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected... CVE-2025-22177 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected... CVE-2025-22175 5.3 MediumOctober 22, 2025
• atlassian jira align Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected... CVE-2025-22168 5.3 MediumOctober 22, 2025
• atlassian jira software data center, jira software server, jira data center +1 more +3 more This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9... CVE-2025-22167 8.7 HighOctober 22, 2025
• atlassian confluence data center, confluence server +1 more This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of... CVE-2025-22166 8.3 HighOctober 21, 2025
• agiloft Agiloft XML external entity local path traversal CVE-2025-35112 5.1 MediumAugust 26, 2025
• agiloft Agiloft insecure download of system packages CVE-2025-35115 9.2 CriticalAugust 26, 2025
• agiloft Agiloft local privilege escalation via default credentials CVE-2025-35114 8.7 HighAugust 26, 2025
• agiloft Agiloft improper neutralization in EUI template engine CVE-2025-35113 4.8 MediumAugust 26, 2025
• atlassian sourcetree, sourcetree for mac +1 more This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8... CVE-2025-22165 5.9 MediumJuly 24, 2025
• atlassian jira core data center, jira service management data center, jira core server +3 more +5 more This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12... CVE-2025-22157 7.2 HighMay 20, 2025
• atlassian jira The XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA server CVE-2025-31487 Fix available 7.7 HighApril 3, 2025
• atlassian jira data center, jira server +1 more An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The... CVE-2019-15002 4.3 MediumFebruary 11, 2025
• atlassian confluence data center, confluence server +1 more This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of... CVE-2024-21703 6.4 MediumNovember 27, 2024
• atlassian sourcetree, sourcetree for mac, sourcetree for windows +2 more This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of... CVE-2024-21697 8.8 HighNovember 19, 2024
• atlassian confluence data center, confluence server +1 more This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was... CVE-2024-21690 7.1 HighAugust 21, 2024
• atlassian bamboo, bamboo data center, bamboo server +2 more This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in... CVE-2024-21689 Public exploit 7.6 HighAugust 20, 2024
• atlassian bitbucket data center There is a low severity open redirect vulnerability within affected versions of Bitbucket Data... CVE-2024-21684 3.1 LowJuly 24, 2024
• atlassian bamboo, bamboo data center, bamboo server +2 more This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9... CVE-2024-21687 8.1 HighJuly 16, 2024
• atlassian confluence data center, confluence server +1 more This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data... CVE-2024-21686 7.3 HighJuly 16, 2024
• atlassian jira core data center, jira core, jira data center +1 more +3 more This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0,... CVE-2024-21685 7.4 HighJune 18, 2024
• atlassian confluence data center, confluence server, crucible +4 more +6 more This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of... CVE-2024-21683 Public exploit EPSS 88.3% 7.2 HighMay 21, 2024
• atlassian floodlight controller, projectfloodlight open sdn controller +1 more An issue in Floodlight SDN OpenFlow Controller v.1.2 allows a remote attacker to cause a denial... CVE-2024-29461 6.3 MediumApril 12, 2024
• atlassian confluence data center, confluence server +1 more This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence... CVE-2024-21677 8.3 HighMarch 19, 2024
• atlassian assets discovery data center This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all... CVE-2024-21682 7.2 HighFebruary 20, 2024
• atlassian confluence data center, confluence server +1 more This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data... CVE-2024-21678 8.5 HighFebruary 20, 2024
• atlassian sourcetree, sourcetree for mac, sourcetree for windows +2 more Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because... CVE-2023-22514 7.8 HighJanuary 16, 2024
• atlassian confluence data center, confluence server +1 more Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because... CVE-2023-22512 EPSS 15.1% 7.5 HighJanuary 16, 2024
• atlassian confluence data center, confluence server +1 more This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of... CVE-2024-21674 8.6 HighJanuary 16, 2024
• Show olderLoading…