Vendor

Atlassian

409 known vulnerabilities.

Products

Jira Server 99 Jira Data Center 64 Jira 52 Confluence Server 39 Confluence Data Center 39 Crucible 27 Fisheye 25 Bitbucket Server 18 Jira Service Management Data Center 16 Fisheye and Crucible 16 Bitbucket Data Center 14 Jira Server and Data Center 14 Jira Align 13 Crowd 13 Jira Service Management Server 13 Bamboo 12 Bamboo Data Center 10 Sourcetree for Windows 8 Crowd Data Center 7 Jira Software Data Center 7 Bamboo Server 6 Confluence 6 Jira Service Desk Server 5 Jira Software Server 5 Application Links 5 Jira Core Server 5 Atlassian Fisheye and Crucible 5 Jira Service Desk Data Center 4 Crowd Server 4 Sourcetree for macOS 4 Sourcetree for Mac 4 Atlassian Application Links 3 Jira Core Data Center 3 Universal Plugin Manager 3 Confluence Questions 2 Atlassian Crucible 2 Assets Discovery Data Center 2 Companion App 2 Atlassian Connect Spring Boot (ACSB) 2 Atlassian Fisheye 1

All Critical High Medium Low Exploited only Public exploit

409 results · Feed

Unscored —

CVE-2019-20404

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determin…

Atlassian Jira Server Web / CMS

Feb 6, 2020
Unscored —

CVE-2019-20402

Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Adminis…

Atlassian Jira Server Web / CMS

Feb 6, 2020
Unscored —

CVE-2019-20403

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira pr…

Atlassian Jira Server Web / CMS

Feb 6, 2020
Unscored —

CVE-2019-20400

The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a direct…

Atlassian Jira Server Web / CMS

Feb 6, 2020
Unscored —

CVE-2019-20401

Various installation setup resources in Jira before version 8.5.2 allow remote attackers to configure a Jira instance, …

Atlassian Jira Server Web / CMS

Feb 6, 2020
Unscored —

CVE-2019-20106

Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, an…

Atlassian Jira Server and Data Center Web / CMS

Feb 6, 2020
Unscored —

CVE-2019-20104

The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remot…

Atlassian Crowd

Feb 6, 2020
Unscored —

CVE-2019-15010

Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.…

Atlassian Bitbucket Server Bitbucket Data Center

Jan 15, 2020
Unscored —

CVE-2019-15012

Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from ve…

Atlassian Bitbucket Server Bitbucket Data Center

Jan 15, 2020
Unscored —

CVE-2019-20097

Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.1…

Atlassian Bitbucket Server Bitbucket Data Center

Jan 15, 2020
Unscored —

CVE-2019-15006

There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and C…

Atlassian Confluence Server Web / CMS

Dec 19, 2019
Unscored —

CVE-2019-15013

The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3,…

Atlassian Jira Web / CMS

Dec 18, 2019
Unscored —

CVE-2019-15011

The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.1…

Atlassian Application Links

Dec 17, 2019
Unscored —

CVE-2017-18107

Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modif…

Atlassian Crowd

Dec 17, 2019
Unscored —

CVE-2019-15008

The /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attacke…

Atlassian Crucible Fisheye

Dec 11, 2019
Unscored —

CVE-2019-15009

The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8.0 allows remote attac…

Atlassian Crucible Fisheye

Dec 11, 2019
Unscored —

CVE-2019-15007

The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary …

Atlassian Crucible Fisheye

Dec 11, 2019
Unscored —

CVE-2019-15005

The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate …

Atlassian Jira Server Confluence Server Crucible Web / CMS

Nov 8, 2019
Unscored —

CVE-2019-15004

The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from…

Atlassian Jira Service Desk Server Jira Service Desk Data Center Web / CMS

Nov 7, 2019
Unscored —

CVE-2019-15003

The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from…

Atlassian Jira Service Desk Server Jira Service Desk Data Center Web / CMS

Nov 7, 2019
Unscored —

CVE-2019-15001 EPSS 11%

The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 be…

Atlassian Jira Server Jira Data Center Web / CMS

Sep 19, 2019
Unscored —

CVE-2019-15000

The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the fixed version for 5.16.x ), from …

Atlassian Bitbucket Server Bitbucket Data Center

Sep 19, 2019
Unscored —

CVE-2019-14994

The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.…

Atlassian Jira Service Desk Server Jira Service Desk Data Center Web / CMS

Sep 19, 2019
Unscored —

CVE-2019-8449 Public exploit Scanner template EPSS 86%

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernam…

Atlassian Jira Web / CMS

Sep 11, 2019
Unscored —

CVE-2019-8450

Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0…

Atlassian Jira Web / CMS

Sep 11, 2019
Unscored —

CVE-2019-8451 Public exploit Scanner template EPSS 94%

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the co…

Atlassian Jira Web / CMS

Sep 11, 2019
Unscored —

CVE-2019-14995

The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an att…

Atlassian Jira Web / CMS

Sep 11, 2019
Unscored —

CVE-2019-14997

The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other u…

Atlassian Jira Web / CMS

Sep 11, 2019
Unscored —

CVE-2019-14998

The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remo…

Atlassian Jira Web / CMS

Sep 11, 2019
Unscored —

CVE-2019-14996

The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows r…

Atlassian Jira Web / CMS

Sep 11, 2019
Unscored —

CVE-2019-3394 Public exploit EPSS 11%

There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An …

Atlassian Confluence Server Web / CMS

Aug 29, 2019
Unscored —

CVE-2019-11587

Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2…

Atlassian Jira Web / CMS

Aug 23, 2019
Unscored —

CVE-2019-11589

The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from v…

Atlassian Jira Web / CMS

Aug 23, 2019
Unscored —

CVE-2019-11588

The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.…

Atlassian Jira Web / CMS

Aug 23, 2019
Unscored —

CVE-2019-11584

The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or Jav…

Atlassian Jira Web / CMS

Aug 23, 2019
Unscored —

CVE-2019-11586

The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from versio…

Atlassian Jira Web / CMS

Aug 23, 2019
Unscored —

CVE-2019-11585

The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0…

Atlassian Jira Web / CMS

Aug 23, 2019
Unscored —

CVE-2019-8444

The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote att…

Atlassian Jira Web / CMS

Aug 23, 2019
Unscored —

CVE-2019-8445

Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote …

Atlassian Jira Web / CMS

Aug 23, 2019
Unscored —

CVE-2019-8446 Scanner template EPSS 18%

The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames vi…

Atlassian Jira Web / CMS

Aug 23, 2019

Atlassian

Products

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determin…

Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Adminis…

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira pr…

The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a direct…

Various installation setup resources in Jira before version 8.5.2 allow remote attackers to configure a Jira instance, …

Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, an…

The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remot…

Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.…

Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from ve…

Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.1…

There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and C…

The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3,…

The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.1…

Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modif…

The /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attacke…

The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8.0 allows remote attac…

The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary …

The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate …

The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from…

The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from…

The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 be…

The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the fixed version for 5.16.x ), from …

The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.…

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernam…

Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0…

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the co…

The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an att…

The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other u…

The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remo…

The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows r…

There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An …

Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2…

The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from v…

The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.…

The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or Jav…

The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from versio…

The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0…

The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote att…

Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote …

The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames vi…