Vendor

Atlassian

409 known vulnerabilities.

Products

Jira Server 99 Jira Data Center 64 Jira 52 Confluence Server 39 Confluence Data Center 39 Crucible 27 Fisheye 25 Bitbucket Server 18 Jira Service Management Data Center 16 Fisheye and Crucible 16 Bitbucket Data Center 14 Jira Server and Data Center 14 Jira Align 13 Crowd 13 Jira Service Management Server 13 Bamboo 12 Bamboo Data Center 10 Sourcetree for Windows 8 Crowd Data Center 7 Jira Software Data Center 7 Bamboo Server 6 Confluence 6 Jira Service Desk Server 5 Jira Software Server 5 Application Links 5 Jira Core Server 5 Atlassian Fisheye and Crucible 5 Jira Service Desk Data Center 4 Crowd Server 4 Sourcetree for macOS 4 Sourcetree for Mac 4 Atlassian Application Links 3 Jira Core Data Center 3 Universal Plugin Manager 3 Confluence Questions 2 Atlassian Crucible 2 Assets Discovery Data Center 2 Companion App 2 Atlassian Connect Spring Boot (ACSB) 2 Atlassian Fisheye 1

All Critical High Medium Low Exploited only Public exploit

409 results · Feed

Unscored —

CVE-2020-4027

Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration pe…

Atlassian Confluence Server Confluence Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-4029

The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, fr…

Atlassian Jira Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-4024

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, an…

Atlassian Jira Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-4025

The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian…

Atlassian Jira Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-4022

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, an…

Atlassian Jira Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-14168

The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.…

Atlassian Jira Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-14169

The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbi…

Atlassian Jira Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-14167

The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from …

Atlassian Jira Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-14166 Public exploit

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows rem…

Atlassian Jira Service Desk Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-14164

The WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows remote attackers to inject arbit…

Atlassian Jira Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2020-14165

The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attac…

Atlassian Jira Server and Data Center Web / CMS

Jul 1, 2020
Unscored —

CVE-2019-20408

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the co…

Atlassian Jira Server Web / CMS

Jul 1, 2020
Unscored —

CVE-2019-20416

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

Atlassian Jira Server Web / CMS

Jun 30, 2020
Unscored —

CVE-2019-20415

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling sett…

Atlassian Jira Server Web / CMS

Jun 30, 2020
Unscored —

CVE-2019-20414

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

Atlassian Jira Server Web / CMS

Jun 29, 2020
Unscored —

CVE-2019-20413

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabil…

Atlassian Jira Server Web / CMS

Jun 29, 2020
Unscored —

CVE-2019-20412

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers…

Atlassian Jira Server Web / CMS

Jun 29, 2020
Unscored —

CVE-2019-20411

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cr…

Atlassian Jira Server Web / CMS

Jun 29, 2020
Unscored —

CVE-2019-20410

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an …

Atlassian Jira Server Web / CMS

Jun 29, 2020
Unscored —

CVE-2020-4028

Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to t…

Atlassian Jira Server and Data Center Web / CMS

Jun 23, 2020
Unscored —

CVE-2019-20409

The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed r…

Atlassian Jira Server Web / CMS

Jun 23, 2020
Unscored —

CVE-2020-4026

The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before …

Atlassian Crucible Fisheye Navigator Links

Jun 2, 2020
Unscored —

CVE-2020-4023

The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject a…

Atlassian Crucible Fisheye

Jun 1, 2020
Unscored —

CVE-2020-4021

Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote …

Atlassian Jira Server and Data Center Web / CMS

Jun 1, 2020
Unscored —

CVE-2020-4020

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who con…

Atlassian Companion App

Jun 1, 2020
Unscored —

CVE-2020-4018

The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setu…

Atlassian Crucible Fisheye

Jun 1, 2020
Unscored —

CVE-2020-4019

The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the a…

Atlassian Companion App

Jun 1, 2020
Unscored —

CVE-2020-4015

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attacker…

Atlassian Crucible Fisheye

Jun 1, 2020
Unscored —

CVE-2020-4017

The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible be…

Atlassian Crucible Fisheye

Jun 1, 2020
Unscored —

CVE-2020-4016

The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before v…

Atlassian Crucible Fisheye

Jun 1, 2020
Unscored —

CVE-2020-4014

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to …

Atlassian Crucible Fisheye

Jun 1, 2020
Unscored —

CVE-2020-4013

The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary …

Atlassian Crucible Fisheye

Jun 1, 2020
Unscored —

CVE-2019-20102

The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version…

Atlassian Confluence Server Web / CMS

Apr 22, 2020
Unscored —

CVE-2019-20407

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenti…

Atlassian Jira Software Web / CMS

Mar 17, 2020
Unscored —

CVE-2019-20105

The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 bef…

Atlassian Jira Server and Data Center Application Links Web / CMS

Mar 17, 2020
Unscored —

CVE-2019-20100

The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are a…

Atlassian Jira Server Application Links Web / CMS

Feb 12, 2020
Unscored —

CVE-2019-20098

The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vuln…

Atlassian Jira Server Web / CMS

Feb 12, 2020
Unscored —

CVE-2019-20099

The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulne…

Atlassian Jira Server Web / CMS

Feb 12, 2020
Unscored —

CVE-2019-20405

The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn t…

Atlassian Jira Server Web / CMS

Feb 6, 2020
Unscored —

CVE-2019-20406

The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.…

Atlassian Confluence Data Center Web / CMS

Feb 6, 2020

Atlassian

Products

Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration pe…

The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, fr…

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, an…

The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian…

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, an…

The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.…

The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbi…

The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from …

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows rem…

The WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows remote attackers to inject arbit…

The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attac…

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the co…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling sett…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScrip…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabil…

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cr…

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an …

Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to t…

The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed r…

The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before …

The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject a…

Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote …

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who con…

The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setu…

The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the a…

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attacker…

The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible be…

The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before v…

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to …

The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary …

The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version…

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenti…

The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 bef…

The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are a…

The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vuln…

The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulne…

The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn t…

The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.…