Vendor

Atlassian

409 known vulnerabilities.

Atlassian at a glance

Last 12 months: 13
Critical · all time: 24
Exploited · all time: 14
Public exploit · all time: 32

8 of the exploited vulnerabilities are known to be used by ransomware (CISA).

New vulnerabilities per month · last 2412 months

Show as table

Month	Vulnerabilities	Critical
Nov 2026	0	0
Oct 2026	1	1
Sep 2026	3	0
Aug 2026	3	0
Jul 2026	3	0
Jun 2026	0	0
May 2026	0	0
Apr 2026	1	1
Mar 2026	1	0
Feb 2026	0	0
Jan 2026	1	0
Dec 2025	0	0
Nov 2025	0	0
Oct 2025	13	0
Sep 2025	0	0
Aug 2025	0	0
Jul 2025	1	0
Jun 2025	0	0
May 2025	1	0
Apr 2025	0	0
Mar 2025	2	0
Feb 2025	1	0
Jan 2025	0	0
Dec 2024	0	0

Most common weaknesses

Products

Jira Server 99 Jira Data Center 64 Jira 52 Confluence Server 39 Confluence Data Center 39 Crucible 27 Fisheye 25 Bitbucket Server 18 Jira Service Management Data Center 16 Fisheye and Crucible 16 Bitbucket Data Center 14 Jira Server and Data Center 14 Jira Align 13 Crowd 13 Jira Service Management Server 13 Bamboo 12 Bamboo Data Center 10 Sourcetree for Windows 8 Crowd Data Center 7 Jira Software Data Center 7 Bamboo Server 6 Confluence 6 Jira Service Desk Server 5 Jira Software Server 5 Application Links 5 Jira Core Server 5 Atlassian Fisheye and Crucible 5 Jira Service Desk Data Center 4 Crowd Server 4 Sourcetree for macOS 4 Sourcetree for Mac 4 Atlassian Application Links 3 Jira Core Data Center 3 Universal Plugin Manager 3 Confluence Questions 2 Atlassian Crucible 2 Assets Discovery Data Center 2 Companion App 2 Atlassian Connect Spring Boot (ACSB) 2 Atlassian Fisheye 1

Latest advisories

High max 9.3

WID-SEC-2026-3376 64 CVEs rev. 16

Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, serverseitige Request-Forgery…

IBM Red Hat Atlassian Linux Windows

Nov 10, 2026
first Sep 15, 2026
High max 9.8

WID-SEC-2026-4427 1 CVE

Atlassian Confluence: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Confluence ausnutzen, um beliebigen Programmcode auszuführen.

Atlassian Linux Windows

Nov 9, 2026
High max 9.8

WID-SEC-2026-4056 75 CVEs rev. 10

Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira ausnutzen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzule…

Oracle IBM Red Hat Atlassian RESF Linux Windows

Nov 9, 2026
first Oct 20, 2026
High max 10.0

WID-SEC-2026-2923 93 CVEs 3 exploited rev. 15

Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye, und Jira): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence, Atlassian Crucible, Atlassian Fisheye und Atlassian Jira ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzufüh…

Red Hat Dell Atlassian Linux Windows

Nov 8, 2026
first Aug 18, 2026
High max 8.3

WID-SEC-2025-0460 3 CVEs rev. 23

Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in Quarkus auf Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen, oder einen Denial of Service auszulösen.

IBM Red Hat Dell Atlassian Hitachi Linux

Nov 3, 2026
first Feb 27, 2025

All Critical High Medium Low Exploited only Public exploit

409 results · Feed

Critical 9.3

CVE-2026-21589 Exploited Public exploit EPSS 100%

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Sof…

Atlassian Confluence Data Center Jira Service Management Data Center Bitbucket Data Center Web / CMS

Oct 5, 2026
KEV Oct 15, 2026
High 7.1

CVE-2026-21587

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Dat…

Atlassian Jira Service Management Data Center Web / CMS

Sep 15, 2026
High 7.1

CVE-2026-21586

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, …

Atlassian Confluence Data Center Web / CMS

Sep 15, 2026
High 7.1

CVE-2026-21588

This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, …

Atlassian Confluence Data Center Web / CMS

Sep 15, 2026
High 8.8

CVE-2026-21582

This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduc…

Atlassian Crowd Data Center

Aug 18, 2026
High 8.6

CVE-2026-21580

This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was intr…

Atlassian Confluence Server Confluence Data Center Web / CMS

Aug 18, 2026
High 7.6

CVE-2026-21584

This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0…

Atlassian Bamboo Data Center

Aug 18, 2026
High 7.1

CVE-2026-21575

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and…

Atlassian Sourcetree for Mac

Jul 21, 2026
High 7.1

CVE-2026-21577

This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, …

Atlassian Confluence Data Center Web / CMS

Jul 21, 2026
High 8.2

CVE-2026-21579

This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1,…

Atlassian Confluence Data Center Web / CMS

Jul 21, 2026
Critical 9.4

CVE-2026-21571

This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.…

Atlassian Bamboo Data Center

Apr 21, 2026
High 8.6

CVE-2026-21570

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0,…

Atlassian Bamboo Data Center

Mar 17, 2026
High 7.9

CVE-2026-21569

This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Cent…

Atlassian Crowd Data Center

Jan 28, 2026
Medium 5.3

CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22174

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22178

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22173

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22170

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an ac…

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22172

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22176

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22171

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of oth…

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22168

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22175

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Atlassian Jira Align Web / CMS

Oct 22, 2025
Medium 5.3

CVE-2025-22177

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Atlassian Jira Align Web / CMS

Oct 22, 2025
High 8.7

CVE-2025-22167

This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain…

Atlassian Jira Software Data Center Jira Software Server Web / CMS

Oct 22, 2025
High 8.3

CVE-2025-22166

This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center. This …

Atlassian Confluence Data Center Web / CMS

Oct 21, 2025
Medium 5.9

CVE-2025-22165

This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac…

Atlassian Sourcetree for Mac

Jul 24, 2025
High 7.2

CVE-2025-22157

This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and…

Atlassian Jira Service Management Data Center Jira Service Management Server Jira Core Server Web / CMS

May 20, 2025
High 7.8

CVE-2023-22514

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and…

Atlassian Sourcetree for Windows Sourcetree for Mac Windows

Mar 18, 2025
High 7.5

CVE-2023-22512 EPSS 15%

This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and …

Atlassian Confluence Server Confluence Data Center Web / CMS

Mar 17, 2025
Medium 4.3

CVE-2019-15002

An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t requir…

Atlassian Jira Server Jira Data Center Web / CMS

Feb 11, 2025
Medium 6.4

CVE-2024-21703

This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center …

Atlassian Confluence Data Center Confluence Server Web / CMS

Nov 27, 2024
High 8.8

CVE-2024-21697

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and…

Atlassian Sourcetree for Windows Sourcetree for Mac Windows

Nov 19, 2024
High 7.1

CVE-2024-21690

This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0,…

Atlassian Confluence Server Confluence Data Center Web / CMS

Aug 21, 2024
High 7.6

CVE-2024-21689 Public exploit

This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9…

Atlassian Bamboo Data Center Bamboo Server

Aug 20, 2024
Low 3.1

CVE-2024-21684

There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitb…

Atlassian Bitbucket Data Center

Jul 24, 2024
High 8.1

CVE-2024-21687

This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and…

Atlassian Bamboo Data Center Bamboo Server

Jul 16, 2024
High 7.3

CVE-2024-21686

This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. This …

Atlassian Confluence Server Confluence Data Center Web / CMS

Jul 16, 2024
High 7.4

CVE-2024-21685

This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Co…

Atlassian Jira Core Data Center Web / CMS

Jun 18, 2024
High 7.2

CVE-2024-21683 Public exploit EPSS 88%

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center an…

Atlassian Confluence Data Center Web / CMS

May 21, 2024

Atlassian

Atlassian at a glance

Most common weaknesses

Products

Latest advisories

Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management: Mehrere Schwachstellen

Atlassian Confluence: Schwachstelle ermöglicht Codeausführung

Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen

Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye, und Jira): Mehrere Schwachstellen

Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Sof…

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Dat…

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, …

This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, …

This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduc…

This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was intr…

This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0…

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and…

This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, …

This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1,…

This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.…

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0,…

This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Cent…

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an ac…

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of oth…

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …

This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain…

This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center. This …

This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac…

This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and…

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and…

This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and …

An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t requir…

This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center …

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and…

This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0,…

This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9…

There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitb…

This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and…

This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. This …

This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Co…

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center an…