Atlassian Data Center vulnerabilities

• atlassian bamboo, bamboo data center, bitbucket data center +14 more +16 more h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira... CVE-2026-21589 In KEVPublic exploit EPSS 99.7% 9.3 CriticalOctober 5, 2026
• atlassian confluence data center This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0... CVE-2026-21579 8.2 HighJuly 21, 2026
• atlassian confluence data center This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0,... CVE-2026-21577 7.1 HighJuly 21, 2026
• atlassian jira software data center, jira software server, jira data center +1 more +3 more This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9... CVE-2025-22167 8.7 HighOctober 22, 2025
• atlassian confluence data center, confluence server +1 more This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of... CVE-2025-22166 8.3 HighOctober 21, 2025
• atlassian jira core data center, jira service management data center, jira core server +3 more +5 more This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12... CVE-2025-22157 7.2 HighMay 20, 2025
• atlassian jira data center, jira server +1 more An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The... CVE-2019-15002 4.3 MediumFebruary 11, 2025
• atlassian confluence data center, confluence server +1 more This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of... CVE-2024-21703 6.4 MediumNovember 27, 2024
• atlassian confluence data center, confluence server +1 more This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was... CVE-2024-21690 7.1 HighAugust 21, 2024
• atlassian bamboo, bamboo data center, bamboo server +2 more This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in... CVE-2024-21689 Public exploit 7.6 HighAugust 20, 2024
• atlassian bitbucket data center There is a low severity open redirect vulnerability within affected versions of Bitbucket Data... CVE-2024-21684 3.1 LowJuly 24, 2024
• atlassian bamboo, bamboo data center, bamboo server +2 more This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9... CVE-2024-21687 8.1 HighJuly 16, 2024
• atlassian confluence data center, confluence server +1 more This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data... CVE-2024-21686 7.3 HighJuly 16, 2024
• atlassian jira core data center, jira core, jira data center +1 more +3 more This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0,... CVE-2024-21685 7.4 HighJune 18, 2024
• atlassian confluence data center, confluence server, crucible +4 more +6 more This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of... CVE-2024-21683 Public exploit EPSS 88.3% 7.2 HighMay 21, 2024
• atlassian confluence data center, confluence server +1 more This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence... CVE-2024-21677 8.3 HighMarch 19, 2024
• atlassian assets discovery data center This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all... CVE-2024-21682 7.2 HighFebruary 20, 2024
• atlassian confluence data center, confluence server +1 more This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data... CVE-2024-21678 8.5 HighFebruary 20, 2024
• atlassian confluence data center, confluence server +1 more Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because... CVE-2023-22512 EPSS 15.1% 7.5 HighJanuary 16, 2024
• atlassian confluence data center, confluence server +1 more This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of... CVE-2024-21674 8.6 HighJanuary 16, 2024
• atlassian confluence data center, confluence server +1 more This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of... CVE-2024-21673 8.0 HighJanuary 16, 2024
• atlassian confluence data center, confluence server +1 more This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of... CVE-2024-21672 8.3 HighJanuary 16, 2024
• atlassian confluence data center, confluence data center and server, confluence server +2 more Summary of Vulnerability A template injection vulnerability on older versions of Confluence Data... CVE-2023-22527 In KEVPublic exploit EPSS 100.0% 10.0 CriticalJanuary 16, 2024
• atlassian confluence data center, confluence server +1 more This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of... CVE-2023-22526 7.2 HighJanuary 16, 2024
• atlassian assets discovery cloud, assets discovery data center, assets discovery data server +2 more This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code... CVE-2023-22523 EPSS 11.2% 9.8 CriticalDecember 6, 2023
• atlassian confluence data center, confluence server +1 more This Template Injection vulnerability allows an authenticated attacker, including one with... CVE-2023-22522 EPSS 12.9% 9.0 CriticalDecember 6, 2023
• atlassian confluence data center, confluence data center and server, confluence server +2 more All versions of Confluence Data Center and Server are affected by this unexploited vulnerability.... CVE-2023-22518 In KEVPublic exploit EPSS 100.0% 10.0 CriticalOctober 31, 2023
• atlassian confluence data center, confluence data center and server, confluence server +2 more Atlassian has been made aware of an issue reported by a handful of customers where external... CVE-2023-22515 In KEVPublic exploit EPSS 99.2% 10.0 CriticalOctober 4, 2023
• atlassian bitbucket data center, bitbucket server +1 more This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of... CVE-2023-22513 EPSS 15.3% 8.5 HighSeptember 19, 2023
• atlassian bamboo data center, bamboo server +1 more This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023... CVE-2023-22506 7.5 HighJuly 18, 2023
• atlassian confluence data center, confluence server +1 more This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was... CVE-2023-22508 8.5 HighJuly 18, 2023
• atlassian confluence data center, confluence server +1 more This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was... CVE-2023-22505 8.0 HighJuly 18, 2023
• atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers... CVE-2023-22503 5.3 MediumMay 1, 2023
• atlassian confluence data center In the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is... CVE-2022-42978 7.5 HighNovember 15, 2022
• atlassian confluence data center The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to... CVE-2022-42977 7.5 HighNovember 15, 2022
• atlassian jira server, jira data center +1 more Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to... CVE-2022-36801 EPSS 67.1% 6.1 MediumAugust 10, 2022
• atlassian jira server, jira data center +1 more This issue exists to document that a security improvement in the way that Jira Server and Data... CVE-2022-36799 EPSS 46.7% 7.2 HighAugust 1, 2022
• atlassian confluence server, confluence data center +1 more The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5... CVE-2020-36290 5.4 MediumJuly 26, 2022
• atlassian bamboo, bitbucket, crowd +19 more +21 more A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause... CVE-2022-26137 8.8 HighJuly 20, 2022
• atlassian bamboo, bitbucket, crowd +19 more +21 more A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to... CVE-2022-26136 9.8 CriticalJuly 20, 2022
• atlassian jira data center, jira server, jira core server +6 more +8 more A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated... CVE-2022-26135 Public exploit EPSS 71.6% 6.5 MediumJune 30, 2022
• atlassian confluence server, confluence data center, confluence server/data center +2 more In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists... CVE-2022-26134 In KEVPublic exploit EPSS 100.0% 9.8 CriticalJune 3, 2022
• atlassian bitbucket data center SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later... CVE-2022-26133 Public exploit EPSS 70.6% 9.8 CriticalApril 20, 2022
• atlassian jira service management server, jira server, jira service management +5 more +7 more A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication... CVE-2022-0540 Public exploit EPSS 88.1% 9.8 CriticalApril 20, 2022
• atlassian confluence data center, confluence server +1 more Affected versions of Atlassian Confluence Server and Data Center allow users with a valid account... CVE-2021-39114 8.8 HighApril 5, 2022
• atlassian jira server, jira data center +1 more This issue exists to document that a security improvement in the way that Jira Server and Data... CVE-2021-43944 7.2 HighMarch 8, 2022
• atlassian data center, jira, jira server +1 more +3 more Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps... CVE-2021-43945 4.8 MediumFebruary 28, 2022
• atlassian jira server, jira data center +1 more Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify... CVE-2021-43941 6.5 MediumFebruary 15, 2022
• atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server and Data Center allow authenticated local... CVE-2021-43940 7.8 HighFebruary 15, 2022
• atlassian data center, jira, jira server +1 more +3 more Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers... CVE-2021-43953 4.3 MediumFebruary 15, 2022
• Show olderLoading…