Skip to contentAtlassian vulnerabilities
Products
Show 10 moreShow less
Newest
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to...CVE-2020-36289EPSS 99.4%5.3 Medium
- atlassian connect spring boot (acsb), connect spring boot +1 moreImproper Authentication in Atlassian Connect Spring BootCVE-2021-26077Fix available8.8 High
- atlassian confluence serverAffected versions of Confluence Server before 7.11.0 allow attackers to identify internal hosts...CVE-2020-294454.3 Medium
- atlassian confluence server, confluence data center +1 moreAffected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject...CVE-2020-294445.4 Medium
- atlassian connect spring boot (acsb), connect spring boot +1 moreBroken Authentication in Atlassian Connect Spring BootCVE-2021-26074Fix available6.5 Medium
- atlassian connect express (ace), connect express +1 moreBroken Authentication in Atlassian Connect ExpressCVE-2021-26073Fix available7.7 High
- atlassian data center, jira, jira server +1 more +3 moreThe jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center...CVE-2021-260763.7 Low
- atlassian data center, jira, jira server +1 more +3 moreThe Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before...CVE-2021-260754.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreThe issue navigation and search view in Jira Server and Data Center before version 8.5.12, from...CVE-2020-362886.1 Medium
- atlassian data center, jira, jira data center +1 more +3 moreThe dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and...CVE-2020-36287Public exploit5.3 Medium
- atlassian confluence data center, confluence server +1 moreThe WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6...CVE-2021-26072EPSS 41.2%4.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreThe membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from...CVE-2020-362865.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreThe SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from...CVE-2021-260713.5 Low
- atlassian data center, jira, jira server +1 more +3 moreThe /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from...CVE-2020-362385.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers...CVE-2021-260695.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind...CVE-2021-260707.2 High
- atlassian crowdThe ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0...CVE-2020-362405.3 Medium
- atlassian gadgets, atlassian-gadgets +1 moreThe MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0...CVE-2020-362325.0 Medium
- atlassian alfresco enterprise content managementAn issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with...CVE-2020-128738.8 High
- atlassian jira server for slackAn endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15...CVE-2021-260688.8 High
- atlassian bitbucket, bitbucket server, bitbucket data center +2 moreThe Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6...CVE-2020-362337.8 High
- atlassian data center, jira data center, jira server +2 moreThe CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8...CVE-2020-29453EPSS 20.3%5.3 Medium
- atlassian confluence data center, confluence server +1 moreThe ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center...CVE-2020-294485.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate...CVE-2020-294514.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to inject...CVE-2020-362344.8 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers...CVE-2020-362375.3 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to inject...CVE-2020-362366.1 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers...CVE-2020-362355.3 Medium
- atlassian crucible, fisheye +1 moreAffected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's...CVE-2020-141924.3 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to view the...CVE-2020-362314.3 Medium
- atlassian bambooAffected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack...CVE-2021-260675.3 Medium
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact...CVE-2020-294506.5 Medium
- atlassian crucible, fisheye +1 moreAffected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files...CVE-2020-294465.3 Medium
- atlassian crucibleAffected versions of Atlassian Crucible allow remote attackers to impact the application's...CVE-2020-294474.3 Medium
- atlassian automation for jiraAffected versions of Automation for Jira - Server allowed remote attackers to read and render...CVE-2020-141935.4 Medium
- atlassian crucible, fisheye +1 moreAffected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of...CVE-2020-141907.5 High
- atlassian crucible, fisheye +1 moreAffected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application...CVE-2020-141917.5 High
- atlassian gajira-comment, jira comment +1 moreThe execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially c…CVE-2020-141899.8 Critical
- atlassian gajira-create, jira create +1 moregajira-create GitHub action vulnerable to arbitrary code executionCVE-2020-14188Fix available9.8 Critical
- atlassian jira, jira server +1 moreAffected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys...CVE-2020-141855.3 Medium
- atlassian jira, jira server +1 moreAffected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or...CVE-2020-141845.4 Medium
- atlassian jira, jira server +1 moreAffected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin)...CVE-2020-141834.3 Medium
- atlassian @atlaskit/editor-core, editor-core +1 moreCross-site scripting in @atlaskit/editor-coreCVE-2019-20903Fix available5.4 Medium
- atlassian crowdUpgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected...CVE-2019-209027.5 High
- atlassian jira serverAffected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the...CVE-2020-141776.5 Medium
- atlassian jira service desk server, jira service desk +1 moreAffected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers...CVE-2020-141804.3 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated...CVE-2020-14179Public exploitEPSS 76.0%5.3 Medium
- atlassian data center, jira, jira server +2 moreAffected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to...CVE-2020-14181Public exploitEPSS 99.7%5.3 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate...CVE-2020-141787.5 High
- atlassian fisheyeAffected versions of Atlassian Fisheye allow remote attackers to view the HTTP password of a...CVE-2017-181126.5 Medium
- Show moreLoading…