Vendor

Atlassian

409 known vulnerabilities.

Products

Jira Server 99 Jira Data Center 64 Jira 52 Confluence Server 39 Confluence Data Center 39 Crucible 27 Fisheye 25 Bitbucket Server 18 Jira Service Management Data Center 16 Fisheye and Crucible 16 Bitbucket Data Center 14 Jira Server and Data Center 14 Jira Align 13 Crowd 13 Jira Service Management Server 13 Bamboo 12 Bamboo Data Center 10 Sourcetree for Windows 8 Crowd Data Center 7 Jira Software Data Center 7 Bamboo Server 6 Confluence 6 Jira Service Desk Server 5 Jira Software Server 5 Application Links 5 Jira Core Server 5 Atlassian Fisheye and Crucible 5 Jira Service Desk Data Center 4 Crowd Server 4 Sourcetree for macOS 4 Sourcetree for Mac 4 Atlassian Application Links 3 Jira Core Data Center 3 Universal Plugin Manager 3 Confluence Questions 2 Atlassian Crucible 2 Assets Discovery Data Center 2 Companion App 2 Atlassian Connect Spring Boot (ACSB) 2 Atlassian Fisheye 1

All Critical High Medium Low Exploited only Public exploit

409 results · Feed

Unscored —

CVE-2020-29451

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Inf…

Atlassian Jira Server Jira Data Center Web / CMS

Feb 15, 2021
Unscored —

CVE-2020-36234

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

Atlassian Jira Server Jira Data Center Web / CMS

Feb 15, 2021
Unscored —

CVE-2020-36237

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field …

Atlassian Jira Server Jira Data Center Web / CMS

Feb 14, 2021
Unscored —

CVE-2020-36236

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

Atlassian Jira Server Jira Data Center Web / CMS

Feb 14, 2021
Unscored —

CVE-2020-36235

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field …

Atlassian Jira Server Jira Data Center Web / CMS

Feb 14, 2021
Unscored —

CVE-2020-14192

Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information D…

Atlassian Crucible Fisheye

Feb 1, 2021
Unscored —

CVE-2020-36231

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they s…

Atlassian Jira Server Jira Data Center Web / CMS

Feb 1, 2021
Unscored —

CVE-2021-26067

Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal th…

Atlassian Bamboo

Jan 28, 2021
Unscored —

CVE-2020-29450

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact the application's ava…

Atlassian Confluence Server Web / CMS

Jan 19, 2021
Unscored —

CVE-2020-29446

Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct O…

Atlassian Crucible Fisheye

Jan 18, 2021
Unscored —

CVE-2020-29447

Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of…

Atlassian Crucible

Dec 21, 2020
Unscored —

CVE-2020-14193

Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templat…

Atlassian Automation for Jira Web / CMS

Nov 30, 2020
Unscored —

CVE-2020-14190

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supp…

Atlassian Crucible Fisheye

Nov 25, 2020
Unscored —

CVE-2020-14191

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a D…

Atlassian Crucible Fisheye

Nov 25, 2020
Unscored —

CVE-2020-14189

The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to e…

Atlassian gajira-comment

Nov 9, 2020
Critical 9.8

CVE-2020-14188

gajira-create GitHub action vulnerable to arbitrary code execution

The preprocessArgs function in the Atlassian gajira-create GitHub Action before version 2.0.1 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue.

Atlassian gajira-create atlassian/gajira-create GitHub Actions

Nov 9, 2020
Unscored —

CVE-2020-14185

Affected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permissio…

Atlassian Jira Server Web / CMS

Oct 15, 2020
Unscored —

CVE-2020-14184

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Si…

Atlassian Jira Server Web / CMS

Oct 12, 2020
Unscored —

CVE-2020-14183

Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Ji…

Atlassian Jira Server Web / CMS

Oct 6, 2020
Medium 5.4

CVE-2019-20903

Cross-site scripting in @atlaskit/editor-core

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link targets.

Atlassian @atlaskit/editor-core @atlaskit/editor-core npm

Oct 1, 2020
Unscored —

CVE-2019-20902

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from befo…

Atlassian Crowd

Oct 1, 2020
Unscored —

CVE-2020-14177

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabil…

Atlassian Jira Server Web / CMS

Sep 21, 2020
Unscored —

CVE-2020-14180

Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-a…

Atlassian Jira Service Desk Server Web / CMS

Sep 21, 2020
Unscored —

CVE-2020-14179 Public exploit Scanner template EPSS 76%

Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field…

Atlassian Jira Server Web / CMS

Sep 21, 2020
Unscored —

CVE-2020-14181 Public exploit Scanner template EPSS 100%

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…

Atlassian Jira Server Web / CMS

Sep 17, 2020
Unscored —

CVE-2020-14178

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Info…

Atlassian Jira Server Web / CMS

Sep 1, 2020
Unscored —

CVE-2017-18112

Affected versions of Atlassian Fisheye allow remote attackers to view the HTTP password of a repository via an Informat…

Atlassian Fisheye

Aug 5, 2020
Unscored —

CVE-2020-14175

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or Jav…

Atlassian Confluence Server Web / CMS

Jul 24, 2020
Unscored —

CVE-2019-20901

The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attacker…

Atlassian Jira Server Web / CMS

Jul 13, 2020
Unscored —

CVE-2020-14174

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project v…

Atlassian Jira Server Web / CMS

Jul 13, 2020
Unscored —

CVE-2019-20900

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

Atlassian Jira Server Web / CMS

Jul 13, 2020
Unscored —

CVE-2019-20899

The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unres…

Atlassian Jira Server Web / CMS

Jul 13, 2020
Unscored —

CVE-2019-20898

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information witho…

Atlassian Jira Server Web / CMS

Jul 13, 2020
Unscored —

CVE-2019-20897

The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achi…

Atlassian Jira Server Web / CMS

Jul 13, 2020
Unscored —

CVE-2020-14170

Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the con…

Atlassian Bitbucket Server

Jul 9, 2020
Unscored —

CVE-2020-14171

Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted rep…

Atlassian Bitbucket Server

Jul 9, 2020
Unscored —

CVE-2020-14173

The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject…

Atlassian Jira Server Web / CMS

Jul 3, 2020
Unscored —

CVE-2020-14172

This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity temp…

Atlassian Jira Server Web / CMS

Jul 3, 2020
Unscored —

CVE-2019-20419

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL h…

Atlassian Jira Server Web / CMS

Jul 3, 2020
Unscored —

CVE-2019-20418

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the i…

Atlassian Jira Server Web / CMS

Jul 3, 2020

Atlassian

Products

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Inf…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field …

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field …

Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information D…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they s…

Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal th…

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact the application's ava…

Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct O…

Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of…

Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templat…

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supp…

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a D…

The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to e…

gajira-create GitHub action vulnerable to arbitrary code execution

Affected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permissio…

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Si…

Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Ji…

Cross-site scripting in @atlaskit/editor-core

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from befo…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabil…

Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-a…

Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field…

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Info…

Affected versions of Atlassian Fisheye allow remote attackers to view the HTTP password of a repository via an Informat…

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or Jav…

The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attacker…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project v…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unres…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information witho…

The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achi…

Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the con…

Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted rep…

The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject…

This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity temp…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL h…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the i…