Vendor
Atlassian
409 known vulnerabilities.
Products
Jira Server 99
Jira Data Center 64
Jira 52
Confluence Server 39
Confluence Data Center 39
Crucible 27
Fisheye 25
Bitbucket Server 18
Jira Service Management Data Center 16
Fisheye and Crucible 16
Bitbucket Data Center 14
Jira Server and Data Center 14
Jira Align 13
Crowd 13
Jira Service Management Server 13
Bamboo 12
Bamboo Data Center 10
Sourcetree for Windows 8
Crowd Data Center 7
Jira Software Data Center 7
Bamboo Server 6
Confluence 6
Jira Service Desk Server 5
Jira Software Server 5
Application Links 5
Jira Core Server 5
Atlassian Fisheye and Crucible 5
Jira Service Desk Data Center 4
Crowd Server 4
Sourcetree for macOS 4
Sourcetree for Mac 4
Atlassian Application Links 3
Jira Core Data Center 3
Universal Plugin Manager 3
Confluence Questions 2
Atlassian Crucible 2
Assets Discovery Data Center 2
Companion App 2
Atlassian Connect Spring Boot (ACSB) 2
Atlassian Fisheye 1
409 results · Feed
-
High 8.3
This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. This Path T…
-
High 7.2
This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Assets Discov…
-
High 8.5
This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data Center. This Stored XSS …
-
High 7.2
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center…
-
Critical 10.0
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated att…
KEV Jan 24, 2024 -
High 8.0
This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Cente…
-
High 8.3
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center …
-
High 8.6
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center…
-
Critical 9.8CVE-2023-22523 EPSS 11%
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with…
-
Critical 9.6
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An at…
-
Critical 9.0CVE-2023-22522 EPSS 13%
This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject …
-
High 8.5
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2…
-
High 8.0
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and S…
-
Critical 10.0
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authori…
KEV Nov 7, 2023 -
Critical 10.0
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploite…
KEV Oct 5, 2023 -
High 8.5CVE-2023-22513 EPSS 15%
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center a…
-
High 7.5
This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in ve…
-
High 8.5
This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of…
-
High 8.0
This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was introduced in version 8.0.0 of…
-
Medium 4.3
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not wr…
-
Medium 5.3
Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of …
-
Critical 9.4CVE-2023-22501 EPSS 16%
An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attack…
-
Critical 9.8
Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfigu…
-
Critical 9.8
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker…
-
High 8.8
The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the…
-
Medium 4.9
The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this is…
-
High 8.8
Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 be…
KEV Sep 30, 2022 -
Medium 6.1CVE-2022-36801 EPSS 67%
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or…
-
Medium 4.3
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Brows…
-
High 7.2CVE-2022-36799 EPSS 47%
This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has…
-
Unscored —
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to a…
-
Unscored —
The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and fr…
-
Critical 9.8
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in t…
KEV Jul 29, 2022 -
High 8.8
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Fi…
-
Critical 9.8
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used…
-
Medium 6.5
A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user …
-
Critical 9.8
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an u…
KEV Jun 2, 2022 -
Critical 9.8
SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and …
-
Critical 9.8
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a speciall…
-
High 8.8
Affected versions of Atlassian Confluence Server and Data Center allow users with a valid account on a Confluence Data …