Vendor
Atlassian
409 known vulnerabilities.
Products
Jira Server 99
Jira Data Center 64
Jira 52
Confluence Server 39
Confluence Data Center 39
Crucible 27
Fisheye 25
Bitbucket Server 18
Jira Service Management Data Center 16
Fisheye and Crucible 16
Bitbucket Data Center 14
Jira Server and Data Center 14
Jira Align 13
Crowd 13
Jira Service Management Server 13
Bamboo 12
Bamboo Data Center 10
Sourcetree for Windows 8
Crowd Data Center 7
Jira Software Data Center 7
Bamboo Server 6
Confluence 6
Jira Service Desk Server 5
Jira Software Server 5
Application Links 5
Jira Core Server 5
Atlassian Fisheye and Crucible 5
Jira Service Desk Data Center 4
Crowd Server 4
Sourcetree for macOS 4
Sourcetree for Mac 4
Atlassian Application Links 3
Jira Core Data Center 3
Universal Plugin Manager 3
Confluence Questions 2
Atlassian Crucible 2
Assets Discovery Data Center 2
Companion App 2
Atlassian Connect Spring Boot (ACSB) 2
Atlassian Fisheye 1
409 results · Feed
-
High 7.2CVE-2021-39115 Public exploit
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Adminis…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving …
-
High 7.5
Path traversal in atlasboard
The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability.
-
Unscored —
The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers…
-
High 7.5
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached …
-
Unscored —
The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from v…
-
Critical 9.8
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an u…
KEV Nov 3, 2021 -
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL …
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path t…
KEV Nov 12, 2024 -
Medium 5.3
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authoriz…
KEV Mar 28, 2022 -
High 8.8
The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attacke…
-
Critical 9.8CVE-2020-36239 EPSS 50%
Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before …
-
Unscored —
Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.…
-
Unscored —
The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, a…
-
Medium 5.3
REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and fro…
-
Unscored —
The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 b…
-
Unscored —
EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before versio…
-
Unscored —CVE-2021-26078 Public exploit
The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 befor…
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…
-
Critical 9.1
Improper Authentication in Atlassian Connect Spring Boot
Broken Authentication in Atlassian Connect Spring Boot (ACSB) in version 1.1.0 before 2.1.3 and from version 2.1.4 before 2.1.5: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian …
-
Medium 4.3
Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify …
-
Medium 5.4
Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javas…
-
Medium 6.5
Broken Authentication in Atlassian Connect Spring Boot
Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian…
-
High 7.7
Broken Authentication in Atlassian Connect Express
Broken Authentication in Atlassian Connect Express (ACE) from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Express a…
-
Unscored —
The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, fr…
-
Unscored —
The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from …
-
Unscored —
The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before ve…
-
Unscored —CVE-2020-36287 Public exploit
The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center befo…
-
Unscored —
The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attacker…
-
Unscored —
The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before versi…
-
Unscored —
The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before versi…
-
Unscored —
The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before ver…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protecti…
-
Unscored —
The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauth…
-
Unscored —
The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from ver…
-
Unscored —
An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers …
-
Unscored —
The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4,…
-
Unscored —
The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 befo…
-
Unscored —
The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center before version 6.13.18,…