Skip to contentAtlassian vulnerabilities
Products
Show 10 moreShow less
Newest
- atlassian jiraThe inline-create rest resource in Jira before version 7.12.3 allows authenticated remote...CVE-2018-208264.3 Medium
- atlassian jiraThe activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject...CVE-2018-208275.4 Medium
- atlassian jira server and data center, jira server +1 moreThere was a server-side template injection vulnerability in Jira Server and Data Center, in the...CVE-2019-11581In KEVPublic exploitEPSS 84.6%9.8 Critical
- softwareag quartz, apache tomee, atlassian jira service management +28 more +30 moreXML external entity injection in Terracotta Quartz SchedulerCVE-2019-13990Public exploitFix availableEPSS 16.6%9.8 Critical
- atlassian jiraThe issue searching component in Jira before version 8.1.0 allows remote attackers to deny access...CVE-2019-115836.5 Medium
- atlassian sourcetree, sourcetree for windows +1 moreAn argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all...CVE-2019-115828.8 High
- atlassian bitbucket, bitbucket data center +1 moreAtlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 ...CVE-2019-33979.1 Critical
- atlassian crowd, crowd and crowd data center +1 moreAtlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled...CVE-2019-11580In KEVPublic exploitEPSS 95.4%9.8 Critical
- atlassian jira, jira server +1 moreThe CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0...CVE-2019-8442EPSS 59.8%7.5 High
- atlassian jira, jira server +1 moreThe ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0...CVE-2019-34026.1 Medium
- atlassian jira, jira server +1 moreThe ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4,...CVE-2019-84438.1 High
- atlassian jira, jira server +1 moreThe /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0...CVE-2019-3403Public exploitEPSS 53.6%5.3 Medium
- atlassian jira, jira server +1 moreThe ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before...CVE-2019-3401EPSS 13.6%5.3 Medium
- atlassian jira, jira server +1 moreThe labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2...CVE-2019-34006.1 Medium
- atlassian jiraThe WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject...CVE-2018-20824EPSS 38.0%6.1 Medium
- atlassian jira, jira server +1 moreThe BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before...CVE-2019-33997.5 High
- atlassian application links, crowd, crucible +5 more +7 moreApplication Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0...CVE-2018-202395.4 Medium
- atlassian confluence, confluence server and data center, confluence server +2 moreConfluence Server and Data Center had a path traversal vulnerability in the...CVE-2019-3398In KEVPublic exploitEPSS 97.0%8.8 High
- atlassian application linksThe OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before...CVE-2017-181118.7 High
- atlassian crowdThe administration backup restore resource in Atlassian Crowd before version 3.0.2 and from...CVE-2017-181106.5 Medium
- atlassian crowdThe login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0...CVE-2017-181096.1 Medium
- atlassian crowdThe administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows...CVE-2017-181087.2 High
- atlassian crowdThe identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially...CVE-2017-181067.5 High
- atlassian crowdThe console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before...CVE-2017-181058.1 High
- atlassian confluence server, confluence server and data server +1 moreThe Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed...CVE-2019-3396In KEVPublic exploitEPSS 99.9%9.8 Critical
- atlassian confluence, confluence server +1 moreThe WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the...CVE-2019-33959.8 Critical
- atlassian sourcetree, sourcetree for windows +1 moreThere was an command injection vulnerability in Sourcetree for Windows from version 0.5a before...CVE-2018-202368.8 High
- atlassian sourcetree, sourcetree for windows +1 moreThere was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0...CVE-2018-202358.8 High
- atlassian sourcetree, sourcetree for macos +1 moreThere was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2...CVE-2018-202348.8 High
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0...CVE-2018-202415.4 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe administrative linker functionality in Atlassian Fisheye and Crucible before version 4.7.0...CVE-2018-202404.8 Medium
- atlassian crowdVarious rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before...CVE-2018-202388.1 High
- atlassian confluence server, confluence data center +1 moreAtlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to...CVE-2018-202376.5 Medium
- atlassian jira, jira server +1 moreThe labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before...CVE-2018-202325.4 Medium
- atlassian jira, jira server +1 moreThe VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7...CVE-2018-134044.1 Medium
- atlassian jira, jira server +1 moreThe two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from...CVE-2018-134035.4 Medium
- atlassian crowdVarious resources in Atlassian Crowd before version 2.10.1 allow remote attackers with...CVE-2016-107404.9 Medium
- atlassian universal plugin managerThe Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows...CVE-2018-202336.5 Medium
- atlassian crowd2Jenkins Crowd 2 Integration Plugin stored credentials in plain textCVE-2018-1000423Fix available7.8 High
- atlassian crowd2Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerabilityCVE-2018-1000422Fix available6.5 Medium
- atlassian hipchatJenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDsCVE-2018-1000419Fix available6.5 Medium
- atlassian hipchatJenkins HipChat Plugin allows credential capture due to incorrect authorizationCVE-2018-1000418Fix available8.8 High
- atlassian sourcetree, sourcetree for windows +1 moreThere was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0...CVE-2018-133978.8 High
- atlassian sourcetree, sourcetree for macos +1 moreThere was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before...CVE-2018-133968.8 High
- atlassian jira, jira server +1 moreMany resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5,...CVE-2018-134026.1 Medium
- atlassian jira, jira server +1 moreThe XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before...CVE-2018-134016.1 Medium
- atlassian jira, jira server +1 moreSeveral administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0...CVE-2018-134004.7 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows...CVE-2018-133997.8 High
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4...CVE-2018-133986.5 Medium
- atlassian jira, jira server +1 moreVarious resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5...CVE-2018-133956.1 Medium
- Show moreLoading…