Skip to contentAtlassian vulnerabilities
Products
Show 10 moreShow less
Newest
- atlassian application links, jira, jira server +1 more +3 moreThe Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The...CVE-2019-201004.7 Medium
- atlassian jira server, jira data center +1 moreThe VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before...CVE-2019-200994.3 Medium
- atlassian jira server, jira data center +1 moreThe VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before...CVE-2019-200984.3 Medium
- atlassian confluence, confluence data center, confluence server +2 moreThe usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5,...CVE-2019-204067.8 High
- atlassian jira server, jira data center +1 moreThe JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows...CVE-2019-204054.3 Medium
- atlassian jira server, jira data center +1 moreThe API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote...CVE-2019-204044.3 Medium
- atlassian jira server, jira data center +1 moreThe API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to...CVE-2019-204035.3 Medium
- atlassian jira, jira server, jira software data center +2 moreSupport zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be...CVE-2019-204024.9 Medium
- atlassian jira serverVarious installation setup resources in Jira before version 8.5.2 allow remote attackers to...CVE-2019-204016.5 Medium
- atlassian jira serverThe usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write...CVE-2019-204007.8 High
- atlassian jira, jira server and data center, jira server +2 more +4 moreComment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0...CVE-2019-201064.3 Medium
- atlassian crowdThe OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0...CVE-2019-201047.5 High
- atlassian bitbucket, bitbucket data center, bitbucket server +2 moreBitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from...CVE-2019-200978.8 High
- atlassian bitbucket, bitbucket data center, bitbucket server +2 moreBitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0...CVE-2019-150128.8 High
- atlassian bitbucket, bitbucket data center, bitbucket server +2 moreBitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5...CVE-2019-150108.8 High
- atlassian confluence, confluence server +1 moreThere was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in...CVE-2019-150066.5 Medium
- atlassian jira, jira server +1 moreThe WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0...CVE-2019-150134.3 Medium
- atlassian application linksThe ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1...CVE-2019-150114.3 Medium
- atlassian crowdVarious resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow...CVE-2017-181076.5 Medium
- atlassian saml single sign onAn issue was discovered in the SAML Single Sign On (SSO) plugin for several Atlassian products...CVE-2019-133477.5 High
- atlassian crucible, fisheye +1 moreThe /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8...CVE-2019-150094.3 Medium
- atlassian crucible, fisheye +1 moreThe /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before version 4.7.3...CVE-2019-150086.1 Medium
- atlassian crucible, fisheye +1 moreThe review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote...CVE-2019-150074.8 Medium
- atlassian bamboo, bitbucket, bitbucket server +8 more +10 moreThe Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an...CVE-2019-150054.3 Medium
- atlassian jira service desk data center, jira service desk server, jira service desk +2 moreThe Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data...CVE-2019-150047.5 High
- atlassian jira service desk data center, jira service desk server, jira service desk +2 moreThe Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data...CVE-2019-150035.3 Medium
- atlassian jira server, jira data center +1 moreThe Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before...CVE-2019-15001EPSS 11.0%7.2 High
- atlassian bitbucket, bitbucket server, bitbucket data center +2 moreThe commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the fixed...CVE-2019-150009.8 Critical
- atlassian jira service desk data center, jira service desk server, jira service desk +2 moreThe Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data...CVE-2019-149947.5 High
- atlassian jira, jira server +1 moreThe /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote...CVE-2019-8451Public exploitEPSS 94.5%6.5 Medium
- atlassian jira, jira server +1 moreVarious templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0...CVE-2019-84504.8 Medium
- atlassian jiraThe /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote...CVE-2019-8449Public exploitEPSS 85.7%5.3 Medium
- atlassian jira, jira server +1 moreThe Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before...CVE-2019-149986.5 Medium
- atlassian jira, jira server +1 moreThe AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn...CVE-2019-149974.3 Medium
- atlassian jira, jira server +1 moreThe FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before...CVE-2019-149966.1 Medium
- atlassian jira, jira server +1 moreThe /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers...CVE-2019-149955.3 Medium
- atlassian confluence, confluence server +1 moreThere was a local file disclosure vulnerability in Confluence Server and Confluence Data Center...CVE-2019-3394Public exploitEPSS 11.0%8.8 High
- atlassian jira, jira server +1 moreThe ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the...CVE-2019-84474.3 Medium
- atlassian jira, jira server +1 moreThe /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to...CVE-2019-8446EPSS 17.5%5.3 Medium
- atlassian jira, jira server +1 moreSeveral worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before...CVE-2019-84455.3 Medium
- atlassian jira, jira server +1 moreThe wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8...CVE-2019-84445.4 Medium
- atlassian universal plugin managerThe Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from...CVE-2019-149994.3 Medium
- atlassian jira, jira server +1 moreThe ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before...CVE-2019-115896.1 Medium
- atlassian jira, jira server +1 moreThe ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8...CVE-2019-115884.3 Medium
- atlassian jira, jira server +1 moreVarious exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8...CVE-2019-115876.5 Medium
- atlassian jira, jira server +1 moreThe AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version...CVE-2019-115864.3 Medium
- atlassian jira, jira server +1 moreThe startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3,...CVE-2019-115856.1 Medium
- atlassian jiraThe MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject...CVE-2019-115846.1 Medium
- atlassian html include and replace macroThe "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of...CVE-2019-15053Public exploit6.8 Medium
- atlassian jira, jira server +1 moreThe login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2...CVE-2019-84485.3 Medium
- Show moreLoading…