Skip to contentAtlassian vulnerabilities
Products
Show 10 moreShow less
Newest
- atlassian confluence data center, confluence server +1 moreThis High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of...CVE-2024-216738.0 High
- atlassian confluence data center, confluence server +1 moreThis High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of...CVE-2024-216728.3 High
- atlassian confluence data center, confluence data center and server, confluence server +2 moreSummary of Vulnerability
A template injection vulnerability on older versions of Confluence Data...CVE-2023-22527In KEVPublic exploitEPSS 100.0%10.0 Critical
- atlassian confluence data center, confluence server +1 moreThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of...CVE-2023-225267.2 High
- atlassian companion, companion for mac +1 moreCertain versions of the Atlassian Companion App for MacOS were affected by a remote code...CVE-2023-22524Public exploitEPSS 24.7%9.6 Critical
- atlassian assets discovery cloud, assets discovery data center, assets discovery data server +2 moreThis vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code...CVE-2023-22523EPSS 11.2%9.8 Critical
- atlassian confluence data center, confluence server +1 moreThis Template Injection vulnerability allows an authenticated attacker, including one with...CVE-2023-22522EPSS 12.9%9.0 Critical
- atlassian crowd, crowd data center, crowd server +2 moreThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of...CVE-2023-225218.0 High
- atlassian bamboo, bamboo data center, bamboo server +2 moreThis High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8...CVE-2023-225168.5 High
- atlassian confluence data center, confluence data center and server, confluence server +2 moreAll versions of Confluence Data Center and Server are affected by this unexploited vulnerability....CVE-2023-22518In KEVPublic exploitEPSS 100.0%10.0 Critical
- atlassian confluence data center, confluence data center and server, confluence server +2 moreAtlassian has been made aware of an issue reported by a handful of customers where external...CVE-2023-22515In KEVPublic exploitEPSS 99.2%10.0 Critical
- atlassian bitbucket data center, bitbucket server +1 moreThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of...CVE-2023-22513EPSS 15.3%8.5 High
- atlassian bamboo data center, bamboo server +1 moreThis High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023...CVE-2023-225067.5 High
- atlassian confluence data center, confluence server +1 moreThis High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was...CVE-2023-225088.5 High
- atlassian confluence data center, confluence server +1 moreThis High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was...CVE-2023-225058.0 High
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server allow remote attackers who have read permissions...CVE-2023-225044.3 Medium
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers...CVE-2023-225035.3 Medium
- atlassian jira service management server, jira service management, jira service management data center +2 moreAn authentication vulnerability was discovered in Jira Service Management Server and Data Center...CVE-2023-22501EPSS 15.5%9.4 Critical
- atlassian crowd, crowd data center, crowd server +2 moreAffected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application...CVE-2022-437829.8 Critical
- atlassian bitbucket, bitbucket server, bitbucket data center +2 moreThere is a command injection vulnerability using environment variables in Bitbucket Server and...CVE-2022-43781Public exploitEPSS 98.0%9.8 Critical
- atlassian confluence data centerIn the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is...CVE-2022-429787.5 High
- atlassian confluence data centerThe Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to...CVE-2022-429777.5 High
- atlassian jira alignThe MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An...CVE-2022-368038.8 High
- atlassian jira alignThe ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote...CVE-2022-368024.9 Medium
- atlassian bitbucket, bitbucket server, bitbucket server and data center +1 more +3 moreMultiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17,...CVE-2022-36804In KEVPublic exploitEPSS 99.0%8.8 High
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to...CVE-2022-36801EPSS 67.1%6.1 Medium
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow remote...CVE-2022-368004.3 Medium
- atlassian jira server, jira data center +1 moreThis issue exists to document that a security improvement in the way that Jira Server and Data...CVE-2022-36799EPSS 46.7%7.2 High
- atlassian jira service management server, jira service management, jira service management data center +1 more +3 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow authenticated...CVE-2021-439595.7 Medium
- atlassian confluence server, confluence data center +1 moreThe Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5...CVE-2020-362905.4 Medium
- atlassian confluence, questions for confluence +1 moreThe Atlassian Questions For Confluence app for Confluence Server and Data Center creates a...CVE-2022-26138In KEVPublic exploitEPSS 98.2%9.8 Critical
- atlassian bamboo, bitbucket, crowd +19 more +21 moreA vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause...CVE-2022-261378.8 High
- atlassian bamboo, bitbucket, crowd +19 more +21 moreA vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to...CVE-2022-261369.8 Critical
- atlassian jira data center, jira server, jira core server +6 more +8 moreA vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated...CVE-2022-26135Public exploitEPSS 71.6%6.5 Medium
- atlassian confluence server, confluence data center, confluence server/data center +2 moreIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists...CVE-2022-26134In KEVPublic exploitEPSS 100.0%9.8 Critical
- atlassian bitbucket data centerSharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later...CVE-2022-26133Public exploitEPSS 70.6%9.8 Critical
- atlassian jira service management server, jira server, jira service management +5 more +7 moreA vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication...CVE-2022-0540Public exploitEPSS 88.1%9.8 Critical
- atlassian confluence data center, confluence server +1 moreAffected versions of Atlassian Confluence Server and Data Center allow users with a valid account...CVE-2021-391148.8 High
- atlassian crucible, fisheye +1 moreVarious rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to...CVE-2021-439589.8 Critical
- atlassian crucible, fisheye +1 moreAffected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files...CVE-2021-439577.5 High
- atlassian crucible, fisheye +1 moreThe jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote...CVE-2021-439566.1 Medium
- atlassian crucible, fisheye +1 moreThe /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed...CVE-2021-439554.3 Medium
- atlassian crucible, fisheye +1 moreThe DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed...CVE-2021-439544.3 Medium
- atlassian jira server, jira data center +1 moreThis issue exists to document that a security improvement in the way that Jira Server and Data...CVE-2021-439447.2 High
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps...CVE-2021-439454.8 Medium
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow attackers...CVE-2021-439434.8 Medium
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow authenticated...CVE-2021-439484.3 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to modify...CVE-2021-439416.5 Medium
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server and Data Center allow authenticated local...CVE-2021-439407.8 High
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow authenticated...CVE-2021-439504.3 Medium
- Show moreLoading…