Skip to contentAtlassian vulnerabilities
Products
Show 10 moreShow less
Newest
- atlassian bambooThe viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote...CVE-2017-180405.4 Medium
- atlassian jiraThe IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows...CVE-2017-180396.1 Medium
- atlassian bitbucket, bitbucket server +1 moreThe repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote...CVE-2017-180385.3 Medium
- atlassian bitbucket, bitbucket server +1 moreThe git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14...CVE-2017-180376.5 Medium
- atlassian bitbucket, bitbucket server +1 moreThe Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote...CVE-2017-180364.3 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye...CVE-2017-180354.3 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe source browse resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0...CVE-2017-180345.4 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreIt was possible for double OGNL evaluation in certain redirect action and in WebWork URL and...CVE-2017-168619.8 Critical
- atlassian crowdThe 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd...CVE-2017-168586.8 Medium
- atlassian activity streamsSeveral rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows...CVE-2017-95135.4 Medium
- atlassian sourcetree, sourcetree for windows +1 moreSourcetree for Windows had several argument and command injection bugs in Mercurial and Git...CVE-2017-145938.8 High
- atlassian sourcetree, sourcetree for macos +1 moreSourcetree for macOS had several argument and command injection bugs in Mercurial and Git...CVE-2017-145928.8 High
- atlassian jiraThe PieChart gadget in Atlassian Jira before version 7.5.3 allows remote attackers to inject...CVE-2017-168636.1 Medium
- atlassian jiraThe Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to...CVE-2017-180336.5 Medium
- atlassian jiraThe Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the...CVE-2017-168655.3 Medium
- atlassian jiraThe issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to...CVE-2017-168646.1 Medium
- atlassian jiraThe IncomingMailServers resource in Atlassian Jira before version 7.6.2 allows remote attackers...CVE-2017-168624.3 Medium
- atlassian jira, jira server +1 moreThe printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from...CVE-2017-145946.1 Medium
- atlassian bambooBamboo did not check that the name of a branch in a Mercurial repository contained argument...CVE-2017-145909.1 Critical
- atlassian bambooIt was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags...CVE-2017-145899.6 Critical
- atlassian auto-unapprove plugin (for bitbucket server), bitbucket auto unapprove plugin +1 moreIt is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it...CVE-2017-168578.5 High
- atlassian confluenceThe RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject...CVE-2017-168566.1 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreAtlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to...CVE-2017-145919.0 Critical
- atlassian hipchat, hipchat for mac desktop client +1 moreThe Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video...CVE-2017-145869.8 Critical
- atlassian hipchat data center, hipchat server +1 moreA Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for...CVE-2017-145857.2 High
- atlassian bambooBamboo before 6.0.5, 6.1.x before 6.1.4, and 6.2.x before 6.2.1 had a REST endpoint that parsed a...CVE-2017-95148.8 High
- atlassian fisheye and crucible, crucible, fisheye +2 moreVarious resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers...CVE-2017-145886.1 Medium
- atlassian fisheye and crucible, crucible, fisheye +2 moreThe administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2...CVE-2017-145875.4 Medium
- atlassian bambooBamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo...CVE-2015-6576Public exploit8.8 High
- atlassian fisheye and crucible, crucible, fisheye +2 moreThe MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows...CVE-2017-95117.5 High
- atlassian fisheye and crucible, crucible, fisheye +2 moreThe mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1...CVE-2017-95127.5 High
- atlassian fisheyeThe repository changelog resource in Atlassian Fisheye before version 4.4.1 allows remote...CVE-2017-95105.4 Medium
- atlassian crucible, fisheye +1 moreThe review file upload resource in Atlassian Crucible before version 4.4.1 allows remote...CVE-2017-95095.4 Medium
- atlassian fisheye and crucible, crucible, fisheye +2 moreVarious resources in Atlassian Fisheye and Crucible before version 4.4.1 allow remote attackers...CVE-2017-95085.4 Medium
- atlassian crucible, fisheye +1 moreThe review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1...CVE-2017-95075.4 Medium
- atlassian oauth plugin, oauth +1 moreThe IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and...CVE-2017-9506Public exploitEPSS 76.1%6.1 Medium
- atlassian confluence, confluence server +1 moreAtlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to...CVE-2017-95054.3 Medium
- atlassian bambooAtlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user...CVE-2017-89078.8 High
- atlassian hipchat serverAtlassian Hipchat Server before 2.2.4 allows remote authenticated users with user level...CVE-2017-80808.8 High
- atlassian hipchatAcceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS...CVE-2017-80585.9 Medium
- atlassian sourcetreeAtlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the...CVE-2017-87689.8 Critical
- atlassian confluence serverAtlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read...CVE-2017-74157.5 High
- atlassian hipchat serverHipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level...CVE-2017-73579.1 Critical
- atlassian jiraThe JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML...CVE-2017-5983EPSS 16.2%9.8 Critical
- atlassian bitbucketAtlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an...CVE-2016-43204.3 Medium
- atlassian jiraAtlassian JIRA Server before 7.1.9 has CSRF in auditing/settings.CVE-2016-43198.8 High
- atlassian jiraAtlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a...CVE-2016-43184.8 Medium
- atlassian confluenceAtlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.CVE-2016-43175.4 Medium
- atlassian jiraCross-site scripting (XSS) vulnerability in includes/decorators/global-translations.jsp in...CVE-2016-62856.1 Medium
- atlassian confluence server, jira integration for hipchat +1 moreThe Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before...CVE-2016-66687.5 High
- Show moreLoading…