[ Vendor · 16 CVEs ]
Atlassian
CVEs affecting Atlassian published in the last 30 days, plus any Atlassian CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-21589 | 5 Oct 2026 | CVSS 7.5 | Unauthenticated file read in Atlassian Data Center productsThis is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data… | ExploitedFix |
| CVE-2023-22527 | 16 Jan 2024 | CVSS 9.8 | Atlassian Confluence Data Center and Server Template InjectionA template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an… | Exploited |
| CVE-2023-22527 | 16 Jan 2024 | CVSS 9.8 | Atlassian Confluence Data Center and Server Template InjectionA template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an… | Exploited |
| CVE-2023-22518 | 31 Oct 2023 | CVSS 9.8 | Atlassian Confluence Data Center and Server Improper AuthorizationAll versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an… | Exploited |
| CVE-2023-22515 | 4 Oct 2023 | CVSS 9.8 | Atlassian Confluence Data Center and Server Broken Access ControlAtlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown… | Exploited |
| CVE-2022-36804 | 25 Aug 2022 | CVSS 8.8 | Atlassian Bitbucket Server and Data Center Command InjectionMultiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from… | ExploitedFix |
| CVE-2022-26138 | 20 Jul 2022 | CVSS 9.8 | Atlassian Questions For Confluence App Hard-coded CredentialsThe Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with… | ExploitedFix |
| CVE-2022-26134 | 3 Jun 2022 | CVSS 9.8 | Atlassian Confluence Server and Data Center Remote Code ExecutionIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to… | ExploitedFix |
| CVE-2021-26084 | 30 Aug 2021 | CVSS 9.8 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) InjectionIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to… | ExploitedFix |
| CVE-2021-26086 | 16 Aug 2021 | CVSS 5.3 | Atlassian Jira Server and Data Center Path TraversalAffected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the… | Exploited |
| CVE-2021-26086 | 16 Aug 2021 | CVSS 5.3 | Atlassian Jira Server and Data Center Path TraversalAffected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the… | Exploited |
| CVE-2021-26085 | 3 Aug 2021 | CVSS 5.3 | Atlassian Confluence Server Pre-Authorization Arbitrary File ReadAffected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read… | Exploited |
| CVE-2019-11581 | 9 Aug 2019 | CVSS 9.8 | Atlassian Jira Server and Data Center Server-Side Template InjectionThere was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions… | Exploited |
| CVE-2019-11580 | 3 Jun 2019 | CVSS 9.8 | Atlassian Crowd and Crowd Data Center Remote Code ExecutionAtlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send… | Exploited |
| CVE-2019-3398 | 18 Apr 2019 | CVSS 8.8 | Atlassian Confluence Server and Data Center Path TraversalConfluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to… | ExploitedFix |
| CVE-2019-3396 | 25 Mar 2019 | CVSS 9.8 | Atlassian Confluence Server and Data Center Server-Side Template InjectionThe Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the… | ExploitedFix |