Login Request a demo
AT
Vendor
Atlassian
72 products with CVEs on record
770
CVEs
44
On KEV
17
New 30D
Products
CO
Confluence
DevOps
9.8
71 CVEs10 on KEV1 new
JD
Jira Data Center
Atlassian
9.8
80 CVEs2 on KEV1 new
CR
Crowd
Atlassian
9.8
25 CVEs2 on KEV1 new
BI
Bitbucket
DevOps
9.9
22 CVEs2 on KEV1 new
BD
Bitbucket Data Center
Atlassian
9.8
5 CVEs2 on KEV1 new
CR
Crucible
Atlassian
9.8
53 CVEs1 on KEV1 new
FI
Fisheye
Atlassian
9.8
53 CVEs1 on KEV1 new
JS
Jira Software Data Center
Atlassian
9.8
40 CVEs1 on KEV1 new
BA
Bamboo
Atlassian
9.8
28 CVEs1 on KEV1 new
JS
Jira Service Management
Atlassian
9.8
17 CVEs1 on KEV1 new
JS
Jira Service Desk
Atlassian
9.8
13 CVEs1 on KEV1 new
BD
Bamboo Data Center
Atlassian
8.8
5 CVEs1 on KEV1 new
JS
Jira Service Management Data Center
Atlassian
7.5
3 CVEs1 on KEV1 new
CD
Crowd Data Center
Atlassian
8.8
2 CVEs1 on KEV1 new
CD
Crucible Data Center
Atlassian
7.5
1 CVEs1 on KEV1 new
FD
Fisheye Data Center
Atlassian
7.5
1 CVEs1 on KEV1 new
MP
Multiple Products
Atlassian
7.5
1 CVEs1 on KEV1 new
CD
Confluence Data Center and Server
Atlassian
9.8
3 CVEs3 on KEV0 new
JI
Jira
DevOps
9.8
195 CVEs2 on KEV0 new
JS
Jira Server and Data Center
Atlassian
9.8
3 CVEs2 on KEV0 new
CS
Confluence Server and Data Center
Atlassian
9.8
2 CVEs2 on KEV0 new
QF
Questions For Confluence
Atlassian
9.8
3 CVEs1 on KEV0 new
BS
Bitbucket Server and Data Center
Atlassian
8.8
1 CVEs1 on KEV0 new
CS
Confluence Server and Data Server
Atlassian
9.8
1 CVEs1 on KEV0 new
CS
Confluence Server/Data Center
Atlassian
9.8
1 CVEs1 on KEV0 new
CA
Crowd and Crowd Data Center
Atlassian
9.8
1 CVEs1 on KEV0 new
DC
Data Center
Atlassian
8.8
38 CVEs0 on KEV0 new
SO
Sourcetree
Atlassian
9.8
16 CVEs0 on KEV0 new
JA
Jira Align
Atlassian
8.8
13 CVEs0 on KEV0 new
AL
Application Links
Atlassian
8.7
7 CVEs0 on KEV0 new
HI
Hipchat
Atlassian
9.8
5 CVEs0 on KEV0 new
AG
Agiloft
Atlassian
8.1
4 CVEs0 on KEV0 new
FL
Floodlight
Atlassian
9.8
4 CVEs0 on KEV0 new
CO
Companion
Atlassian
9.8
3 CVEs0 on KEV0 new
FA
Fisheye and Crucible
Atlassian
6.1
3 CVEs0 on KEV0 new
HS
Hipchat Server
Atlassian
9.1
3 CVEs0 on KEV0 new
UP
Universal Plugin Manager
Atlassian
6.5
3 CVEs0 on KEV0 new
AD
Assets Discovery Data Center
Atlassian
8.8
2 CVEs0 on KEV0 new
CQ
Confluence Questions
Atlassian
6.5
2 CVEs0 on KEV0 new
CS
Connect Spring Boot
Atlassian
8.8
2 CVEs0 on KEV0 new
CR
Crowd2
Atlassian
7.8
2 CVEs0 on KEV0 new
SS
Saml Single Sign ON
Atlassian
9.8
2 CVEs0 on KEV0 new
SF
Sourcetree for Windows
Atlassian
8.8
2 CVEs0 on KEV0 new
AS
Activity Streams
Atlassian
5.4
1 CVEs0 on KEV0 new
AE
Alfresco Enterprise Content Management
Atlassian
8.8
1 CVEs0 on KEV0 new
AD
Assets Discovery Cloud
Atlassian
8.8
1 CVEs0 on KEV0 new
AD
Assets Discovery Data Server
Atlassian
8.8
1 CVEs0 on KEV0 new
AT
Atlasboard
Atlassian
7.5
1 CVEs0 on KEV0 new
AT
Atlassian-gadgets
Atlassian
5.0
1 CVEs0 on KEV0 new
AF
Automation For Jira
Atlassian
5.4
1 CVEs0 on KEV0 new
BS
Bamboo Server
Atlassian
8.8
1 CVEs0 on KEV0 new
BA
Bitbucket Auto Unapprove Plugin
Atlassian
8.5
1 CVEs0 on KEV0 new
CL
cloudtoken
Atlassian
6.1
1 CVEs0 on KEV0 new
CE
Connect Express
Atlassian
7.7
1 CVEs0 on KEV0 new
ED
Editor-core
Atlassian
5.4
1 CVEs0 on KEV0 new
FC
Floodlight Controller
Atlassian
7.5
1 CVEs0 on KEV0 new
GR
Greenhopper
Atlassian
5.4
1 CVEs0 on KEV0 new
HD
Hipchat Data Center
Atlassian
7.2
1 CVEs0 on KEV0 new
HI
Html Include And Replace Macro
Atlassian
6.8
1 CVEs0 on KEV0 new
HL
Http Library
Atlassian
4.7
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-21589
In wildKEV
CO
Confluence
Atlassian
7.5
99%
Oct 5Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CVE-2026-21588
CO
Confluence
Atlassian
7.1
0%
Sep 15This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data…
CVE-2026-21587
JS
Jira Service Management Data Center
Atlassian
7.1
0%
Sep 15This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center
CVE-2026-21586
CO
Confluence
Atlassian
7.1
0%
Sep 15This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and…
CVE-2026-21584
BD
Bamboo Data Center
Atlassian
8.1
0%
Aug 18This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center
CVE-2026-21582
CD
Crowd Data Center
Atlassian
8.8
0%
Aug 18This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center
CVE-2026-21580
CO
Confluence
Atlassian
9.3
1%
Aug 18This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0,…
CVE-2026-21575
SF
Sourcetree for Mac
Atlassian
8.0
1%
Jul 21This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows
CVE-2026-21577
CO
Confluence
Atlassian
6.5
0%
Jul 21This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center
CVE-2026-21579
CO
Confluence
Atlassian
7.5
0%
Jul 21This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data…
CVE-2026-21571
BD
Bamboo Data Center
Atlassian
8.8
1%
Apr 21This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center
CVE-2026-21570
BD
Bamboo Data Center
Atlassian
8.8
1%
Mar 17This High severity RCE (Remote Code Execution)  vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center
CVE-2026-21569
CR
Crowd
Atlassian
7.9
0%
Jan 28This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server
CVE-2025-22178
JA
Jira Align
Atlassian
4.3
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22177
JA
Jira Align
Atlassian
4.3
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22176
JA
Jira Align
Atlassian
4.3
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22175
JA
Jira Align
Atlassian
5.4
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22174
JA
Jira Align
Atlassian
4.3
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22173
JA
Jira Align
Atlassian
4.3
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22172
JA
Jira Align
Atlassian
4.3
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22171
JA
Jira Align
Atlassian
4.3
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22170
JA
Jira Align
Atlassian
4.3
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22169
JA
Jira Align
Atlassian
5.4
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22168
JA
Jira Align
Atlassian
4.3
0%
Oct 22Jira Align is vulnerable to an authorization issue
CVE-2025-22167
JI
Jira
Atlassian
6.5
0%
Oct 22This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server
CVE-2025-22166
CO
Confluence
Atlassian
7.5
1%
Oct 21This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center
CVE-2025-35115
AG
Agiloft
Atlassian
8.1
0%
Aug 26Agiloft Release 28 downloads critical system packages over an insecure HTTP connection
CVE-2025-35114
AG
Agiloft
Atlassian
7.5
0%
Aug 26Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation
CVE-2025-35113
AG
Agiloft
Atlassian
7.2
0%
Aug 26Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a…
CVE-2025-35112
AG
Agiloft
Atlassian
4.9
0%
Aug 26Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and…
CVE-2025-22165
SO
Sourcetree
Atlassian
7.3
0%
Jul 24This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac
CVE-2025-22157
JI
Jira
Atlassian
8.8
1%
May 20This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0,…
CVE-2019-15002
JI
Jira
Atlassian
4.3
0%
Feb 11An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0
CVE-2024-21703
CO
Confluence
Atlassian
6.4
0%
Nov 27This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center and Server for Windows installations
CVE-2024-21697
SO
Sourcetree
Atlassian
8.8
1%
Nov 19This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows
CVE-2024-21690
CO
Confluence
Atlassian
8.2
1%
Aug 21This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0,…
CVE-2024-21689
BA
Bamboo
Atlassian
8.0
3%
Aug 20This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and…
CVE-2024-21684
BD
Bitbucket Data Center
Atlassian
4.3
0%
Jul 24There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center
CVE-2024-21687
BA
Bamboo
Atlassian
8.1
1%
Jul 16This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo Data Center and Server
CVE-2024-21686
CO
Confluence
Atlassian
8.7
1%
Jul 16This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server
CVE-2024-21685
JI
Jira
Atlassian
6.5
0%
Jun 18This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center
CVE-2024-21683
CO
Confluence
Atlassian
8.8
88%
May 21This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server
CVE-2024-21677
CO
Confluence
Atlassian
8.8
1%
Mar 19This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center
CVE-2024-21682
AD
Assets Discovery Data Center
Atlassian
7.2
1%
Feb 20This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions)
CVE-2024-21678
CO
Confluence
Atlassian
8.5
0%
Feb 20This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data Center
CVE-2023-22514
SO
Sourcetree
Atlassian
7.8
0%
Jan 16This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows
CVE-2023-22512
CO
Confluence
Atlassian
7.5
15%
Jan 16This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server
CVE-2024-21674
CO
Confluence
Atlassian
7.5
2%
Jan 16This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server
CVE-2024-21673
CO
Confluence
Atlassian
8.8
2%
Jan 16This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server
CVE-2024-21672
CO
Confluence
Atlassian
8.8
1%
Jan 16This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server
CVE-2023-22526
CO
Confluence
Atlassian
8.8
2%
Jan 16This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center
CVE-2023-22527
RansomwareIn wildKEV
CO
Confluence
Atlassian
9.8
100%
Jan 16Atlassian Confluence Data Center and Server Template Injection Vulnerability
CVE-2023-22524
CO
Companion
Atlassian
9.8
25%
Dec 6Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability
CVE-2023-22523
AD
Assets Discovery Data Server
Atlassian
8.8
11%
Dec 6This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed
CVE-2023-22522
CO
Confluence
Atlassian
8.8
13%
Dec 6This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page
CVE-2023-22521
CR
Crowd
Atlassian
8.8
1%
Nov 21This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server
CVE-2023-22516
BA
Bamboo
Atlassian
8.8
1%
Nov 21This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamboo Data Center and Server
CVE-2023-22518
RansomwareIn wildKEV
CO
Confluence
Atlassian
9.8
100%
Oct 31Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
CVE-2023-22515
RansomwareIn wildKEV
CO
Confluence
Atlassian
9.8
99%
Oct 4Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
CVE-2023-22513
BI
Bitbucket
Atlassian
8.8
15%
Sep 19This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server