Skip to content

Atlassian vulnerabilities

Products

Show 10 moreShow less

Newest

atlassian confluenceCross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote...CVE-2016-6283Public exploit6.1 MediumJanuary 18, 2017
atlassian crowdThe LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote...CVE-2016-64969.8 CriticalDecember 9, 2016
atlassian bambooAtlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted...CVE-2016-52299.8 CriticalAugust 2, 2016
atlassian confluenceAtlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files...CVE-2015-8399Public exploitEPSS 60.2%4.3 MediumApril 11, 2016
atlassian confluenceCross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote...CVE-2015-8398Public exploit6.1 MediumApril 11, 2016
atlassian bambooMultiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not...CVE-2015-83619.1 CriticalFebruary 8, 2016
atlassian bambooAn unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote...CVE-2015-83609.8 CriticalFebruary 8, 2016
atlassian bambooThe Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5...CVE-2014-97579.8 CriticalFebruary 8, 2016
atlassian jira core, jira service desk, jira server +2 moreAtlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer...CVE-2015-84813.1 LowJanuary 8, 2016
atlassian hipchatThe HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to...CVE-2015-5603Public exploitEPSS 59.3%6.5 MediumSeptember 21, 2015
atlassian confluence serverCross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6...CVE-2012-63426.8 MediumMay 13, 2014
atlassian jiraDirectory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4...CVE-2014-2314Public exploitEPSS 26.1%4.3 MediumMarch 7, 2014
atlassian jiraDirectory traversal vulnerability in the Importers plugin in Atlassian JIRA before 6.0.5 allows...CVE-2014-23134.3 MediumMarch 7, 2014
atlassian jiraCross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the...CVE-2013-53194.3 MediumAugust 20, 2013
atlassian crowd** DISPUTED ** Atlassian Crowd 2.6.3 allows remote attackers to execute arbitrary commands via...CVE-2013-3926Disputed7.5 HighJuly 1, 2013
atlassian crowdAtlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers...CVE-2013-39255.8 MediumJuly 1, 2013
atlassian jira, gliffy, atlassian confluence server +2 moreThe Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does...CVE-2012-29286.4 MediumMay 22, 2012
atlassian bamboo, confluence, crowd +4 more +6 moreAtlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10;...CVE-2012-2926Public exploitEPSS 66.3%9.1 CriticalMay 22, 2012
atlassian fisheyeMultiple cross-site scripting (XSS) vulnerabilities in the user profile feature in Atlassian...CVE-2011-48224.3 MediumDecember 15, 2011
atlassian jiraAtlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary...CVE-2010-11659.0 HighApril 20, 2010
atlassian jiraMultiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow...CVE-2010-11644.3 MediumApril 20, 2010
atlassian jiraCross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows...CVE-2008-68326.8 MediumJune 8, 2009
atlassian jiraMultiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13...CVE-2008-68314.3 MediumJune 8, 2009
atlassian jiraThe WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers...CVE-2008-65316.8 MediumMarch 26, 2009
atlassian jiraThe Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict...CVE-2007-66197.5 HighJanuary 3, 2008
atlassian jiraJIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared...CVE-2007-66185.0 MediumJanuary 3, 2008
atlassian jiraCross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1...CVE-2007-66174.3 MediumJanuary 3, 2008
atlassian jirasecure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain...CVE-2006-33395.0 MediumJuly 3, 2006
atlassian jiraCross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to...CVE-2006-33382.6 LowJuly 3, 2006
atlassian confluenceCross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian...CVE-2005-39674.3 MediumDecember 3, 2005