Vendor
Atlassian
409 known vulnerabilities.
Products
Jira Server 99
Jira Data Center 64
Jira 52
Confluence Server 39
Confluence Data Center 39
Crucible 27
Fisheye 25
Bitbucket Server 18
Jira Service Management Data Center 16
Fisheye and Crucible 16
Bitbucket Data Center 14
Jira Server and Data Center 14
Jira Align 13
Crowd 13
Jira Service Management Server 13
Bamboo 12
Bamboo Data Center 10
Sourcetree for Windows 8
Crowd Data Center 7
Jira Software Data Center 7
Bamboo Server 6
Confluence 6
Jira Service Desk Server 5
Jira Software Server 5
Application Links 5
Jira Core Server 5
Atlassian Fisheye and Crucible 5
Jira Service Desk Data Center 4
Crowd Server 4
Sourcetree for macOS 4
Sourcetree for Mac 4
Atlassian Application Links 3
Jira Core Data Center 3
Universal Plugin Manager 3
Confluence Questions 2
Atlassian Crucible 2
Assets Discovery Data Center 2
Companion App 2
Atlassian Connect Spring Boot (ACSB) 2
Atlassian Fisheye 1
409 results · Feed
-
Critical 9.8
Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login …
-
High 7.5
Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct…
-
Unscored —
The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbit…
-
Unscored —
The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote at…
-
Unscored —
The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have…
-
High 7.2
This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissio…
-
Unscored —
Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privil…
-
Unscored —
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to v…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (includin…
-
High 7.8
Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevate…
-
Unscored —
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to v…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread …
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the defaul…
-
Unscored —
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to v…
-
Unscored —
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to v…
-
High 7.2
Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to exec…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator gr…
-
Unscored —CVE-2021-43942 EPSS 55%
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management acces…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked fro…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit e…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers t…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of …
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of privat…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cro…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL …
-
High 7.2
Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attacker…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames o…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full na…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the applica…
-
Unscored —
The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.1…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via a…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys o…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabil…