Vendor
Atlassian
409 known vulnerabilities.
Products
Jira Server 99
Jira Data Center 64
Jira 52
Confluence Server 39
Confluence Data Center 39
Crucible 27
Fisheye 25
Bitbucket Server 18
Jira Service Management Data Center 16
Fisheye and Crucible 16
Bitbucket Data Center 14
Jira Server and Data Center 14
Jira Align 13
Crowd 13
Jira Service Management Server 13
Bamboo 12
Bamboo Data Center 10
Sourcetree for Windows 8
Crowd Data Center 7
Jira Software Data Center 7
Bamboo Server 6
Confluence 6
Jira Service Desk Server 5
Jira Software Server 5
Application Links 5
Jira Core Server 5
Atlassian Fisheye and Crucible 5
Jira Service Desk Data Center 4
Crowd Server 4
Sourcetree for macOS 4
Sourcetree for Mac 4
Atlassian Application Links 3
Jira Core Data Center 3
Universal Plugin Manager 3
Confluence Questions 2
Atlassian Crucible 2
Assets Discovery Data Center 2
Companion App 2
Atlassian Connect Spring Boot (ACSB) 2
Atlassian Fisheye 1
32 results · Clear filters · Feed
-
Critical 9.3
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Sof…
KEV Oct 15, 2026 -
High 7.6CVE-2024-21689 Public exploit
This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9…
-
High 7.2
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center an…
-
Critical 10.0
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated att…
KEV Jan 24, 2024 -
Critical 9.6
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An at…
-
Critical 10.0
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authori…
KEV Nov 7, 2023 -
Critical 10.0
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploite…
KEV Oct 5, 2023 -
Critical 9.8
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker…
-
High 8.8
Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 be…
KEV Sep 30, 2022 -
Critical 9.8
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in t…
KEV Jul 29, 2022 -
Medium 6.5
A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user …
-
Critical 9.8
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an u…
KEV Jun 2, 2022 -
Critical 9.8
SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and …
-
Critical 9.8
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a speciall…
-
High 7.2CVE-2021-39115 Public exploit
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Adminis…
-
Critical 9.8
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an u…
KEV Nov 3, 2021 -
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path t…
KEV Nov 12, 2024 -
Medium 5.3
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authoriz…
KEV Mar 28, 2022 -
Unscored —CVE-2021-26078 Public exploit
The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 befor…
-
Unscored —CVE-2020-36287 Public exploit
The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center befo…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…
-
Unscored —CVE-2020-14166 Public exploit
The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows rem…
-
Unscored —
The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernam…
-
Unscored —
The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the co…
-
Unscored —
There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An …
-
Critical 9.8
There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators a…
KEV Mar 7, 2022 -
Critical 9.8
Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Atta…
KEV Nov 3, 2021 -
Unscored —
The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and f…
-
High 8.8
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote a…
KEV Nov 3, 2021 -
Critical 9.8
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from ver…
KEV Nov 3, 2021 -
Unscored —
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before…