Vendor

Atlassian

409 known vulnerabilities.

Products

Jira Server 99 Jira Data Center 64 Jira 52 Confluence Server 39 Confluence Data Center 39 Crucible 27 Fisheye 25 Bitbucket Server 18 Jira Service Management Data Center 16 Fisheye and Crucible 16 Bitbucket Data Center 14 Jira Server and Data Center 14 Jira Align 13 Crowd 13 Jira Service Management Server 13 Bamboo 12 Bamboo Data Center 10 Sourcetree for Windows 8 Crowd Data Center 7 Jira Software Data Center 7 Bamboo Server 6 Confluence 6 Jira Service Desk Server 5 Jira Software Server 5 Application Links 5 Jira Core Server 5 Atlassian Fisheye and Crucible 5 Jira Service Desk Data Center 4 Crowd Server 4 Sourcetree for macOS 4 Sourcetree for Mac 4 Atlassian Application Links 3 Jira Core Data Center 3 Universal Plugin Manager 3 Confluence Questions 2 Atlassian Crucible 2 Assets Discovery Data Center 2 Companion App 2 Atlassian Connect Spring Boot (ACSB) 2 Atlassian Fisheye 1

All Critical High Medium Low Exploited only Public exploit

409 results · Feed

Unscored —

CVE-2018-13396

There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git s…

Atlassian Sourcetree for macOS macOS

Nov 5, 2018
Unscored —

CVE-2018-13400

Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from …

Atlassian Jira Web / CMS

Oct 23, 2018
Unscored —

CVE-2018-13401

The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from vers…

Atlassian Jira Web / CMS

Oct 23, 2018
Unscored —

CVE-2018-13402

Many resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 befo…

Atlassian Jira Web / CMS

Oct 23, 2018
Unscored —

CVE-2018-13399

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escal…

Atlassian Fisheye and Crucible

Oct 16, 2018
Unscored —

CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attacker…

Atlassian Fisheye and Crucible

Sep 18, 2018
Unscored —

CVE-2018-13391

The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from …

Atlassian Jira Web / CMS

Aug 28, 2018
Unscored —

CVE-2018-13395

Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 b…

Atlassian Jira Web / CMS

Aug 28, 2018
Unscored —

CVE-2018-13393

The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Conf…

Atlassian Confluence Questions Web / CMS

Aug 15, 2018
Unscored —

CVE-2018-13394

The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Que…

Atlassian Confluence Questions Web / CMS

Aug 15, 2018
Unscored —

CVE-2018-13392

Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTM…

Atlassian Fisheye and Crucible

Aug 13, 2018
Medium 6.1

CVE-2018-13390

Cloudtoken Insufficiently Protects Credentials

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles.

Atlassian cloudtoken cloudtoken PyPI

Aug 10, 2018
Unscored —

CVE-2018-13385

There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attac…

Atlassian Sourcetree for macOS macOS

Jul 24, 2018
Unscored —

CVE-2018-13386

There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An att…

Atlassian Sourcetree for Windows Windows

Jul 24, 2018
Unscored —

CVE-2017-18104

The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.11.0 allows remot…

Atlassian Jira Web / CMS

Jul 24, 2018
Unscored —

CVE-2018-5232

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows …

Atlassian Jira Web / CMS

Jul 18, 2018
Unscored —

CVE-2017-18103

The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoo…

Atlassian atlassian-http

Jul 18, 2018
Unscored —

CVE-2018-13387

The IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7.0 before version 7.7.5…

Atlassian Jira Web / CMS

Jul 16, 2018
Unscored —

CVE-2018-5229

The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remo…

Atlassian Universal Plugin Manager

Jul 16, 2018
Unscored —

CVE-2018-13389

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in th…

Atlassian Confluence Web / CMS

Jul 10, 2018
Unscored —

CVE-2018-13388

The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject…

Atlassian Fisheye and Crucible

Jul 10, 2018
Unscored —

CVE-2017-16859

The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 …

Atlassian Fisheye and Crucible

Jun 28, 2018
Unscored —

CVE-2018-5231

The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from v…

Atlassian Jira Web / CMS

May 16, 2018
Unscored —

CVE-2018-5230 Scanner template EPSS 37%

The issue collector in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0…

Atlassian Jira Web / CMS

May 14, 2018
Unscored —

CVE-2017-16860

The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version …

Atlassian Application Links

May 14, 2018
Unscored —

CVE-2018-5226

There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going…

Atlassian SourceTree Windows Windows

Apr 25, 2018
Unscored —

CVE-2018-5228

The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbi…

Atlassian Fisheye and Crucible

Apr 24, 2018
Unscored —

CVE-2017-18102

The wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows remote attackers to inj…

Atlassian atlassian-renderer

Apr 17, 2018
Unscored —

CVE-2018-5227

Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote atta…

Atlassian Atlassian Application Links

Apr 10, 2018
Unscored —

CVE-2017-18101

Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7…

Atlassian Jira Web / CMS

Apr 10, 2018
Unscored —

CVE-2017-18098

The searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to inject arbitrary HTML …

Atlassian Jira Web / CMS

Apr 6, 2018
Unscored —

CVE-2017-18097

The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Ji…

Atlassian Jira Web / CMS

Apr 6, 2018
Unscored —

CVE-2017-18096

The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.…

Atlassian Atlassian Application Links

Apr 4, 2018
Unscored —

CVE-2018-5223

Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows…

Atlassian Fisheye and Crucible

Mar 29, 2018
Unscored —

CVE-2018-5224

Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows operating sys…

Atlassian Bamboo

Mar 29, 2018
Unscored —

CVE-2018-5225

In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through…

Atlassian Bitbucket Server

Mar 22, 2018
Unscored —

CVE-2017-18094

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allow …

Atlassian Fisheye and Crucible

Mar 22, 2018
Unscored —

CVE-2017-18093

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0…

Atlassian Fisheye and Crucible

Feb 19, 2018
Unscored —

CVE-2017-18092

The print snippet resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 al…

Atlassian Crucible

Feb 19, 2018
Unscored —

CVE-2017-18095

The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 (the fixed version 4.5.x) and before 4.6.0 a…

Atlassian Crucible

Feb 19, 2018

Atlassian

Products

There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git s…

Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from …

The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from vers…

Many resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 befo…

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escal…

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attacker…

The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from …

Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 b…

The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Conf…

The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Que…

Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTM…

Cloudtoken Insufficiently Protects Credentials

There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attac…

There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An att…

The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.11.0 allows remot…

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows …

The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoo…

The IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7.0 before version 7.7.5…

The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remo…

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in th…

The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject…

The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 …

The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from v…

The issue collector in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0…

The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version …

There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going…

The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbi…

The wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows remote attackers to inj…

Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote atta…

Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7…

The searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to inject arbitrary HTML …

The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Ji…

The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.…

Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows…

Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows operating sys…

In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through…

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allow …

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0…

The print snippet resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 al…

The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 (the fixed version 4.5.x) and before 4.6.0 a…