Vendor
Atlassian
409 known vulnerabilities.
Products
Jira Server 99
Jira Data Center 64
Jira 52
Confluence Server 39
Confluence Data Center 39
Crucible 27
Fisheye 25
Bitbucket Server 18
Jira Service Management Data Center 16
Fisheye and Crucible 16
Bitbucket Data Center 14
Jira Server and Data Center 14
Jira Align 13
Crowd 13
Jira Service Management Server 13
Bamboo 12
Bamboo Data Center 10
Sourcetree for Windows 8
Crowd Data Center 7
Jira Software Data Center 7
Bamboo Server 6
Confluence 6
Jira Service Desk Server 5
Jira Software Server 5
Application Links 5
Jira Core Server 5
Atlassian Fisheye and Crucible 5
Jira Service Desk Data Center 4
Crowd Server 4
Sourcetree for macOS 4
Sourcetree for Mac 4
Atlassian Application Links 3
Jira Core Data Center 3
Universal Plugin Manager 3
Confluence Questions 2
Atlassian Crucible 2
Assets Discovery Data Center 2
Companion App 2
Atlassian Connect Spring Boot (ACSB) 2
Atlassian Fisheye 1
36 results · Clear filters · Feed
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an ac…
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of oth…
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …
-
Medium 5.3
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose …
-
Medium 5.9
This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac…
-
Medium 4.3
An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t requir…
-
Medium 6.4
This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center …
-
Medium 4.3
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not wr…
-
Medium 5.3
Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of …
-
Medium 4.9
The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this is…
-
Medium 6.1CVE-2022-36801 EPSS 67%
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or…
-
Medium 4.3
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Brows…
-
Medium 6.5
A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user …
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management acces…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL …
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames o…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full na…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via a…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving …
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path t…
KEV Nov 12, 2024 -
Medium 5.3
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authoriz…
KEV Mar 28, 2022 -
Medium 5.3
REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and fro…
-
Medium 5.3CVE-2020-36289 EPSS 99%
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…
-
Medium 4.3
Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify …
-
Medium 5.4
Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javas…
-
Medium 6.5
Broken Authentication in Atlassian Connect Spring Boot
Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian…
-
Medium 5.4
Cross-site scripting in @atlaskit/editor-core
The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link targets.
-
Medium 6.1
Cloudtoken Insufficiently Protects Credentials
Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles.