atlassian Vulnerability Advisory Catalog

Total 464 security vulnerabilities recorded for atlassian software and firmware.

← Back to All Vendors
Component: bamboo

This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 o...

📅 2024-08-20
CVSS 8.0 Dossier →
Component: bitbucket_data_center

There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbucket DC from 8.0.0 to 8.9.12 a...

📅 2024-07-24
CVSS 4.3 Dossier →
Component: bamboo

This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo Data Center an...

📅 2024-07-16
CVSS 8.1 Dossier →
Component: confluence_data_center

This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. This Stored XSS vulnerability, with...

📅 2024-07-16
CVSS 8.7 Dossier →
Component: jira_data_center

This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. This Info...

📅 2024-06-18
CVSS 6.5 Dossier →
Component: confluence_data_center

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server. This RCE (Remote Cod...

📅 2024-05-21
CVSS 8.8 Dossier →
Component: confluence_data_center

This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. This Path Traversal vulnerability, with a ...

📅 2024-03-19
CVSS 8.8 Dossier →
Component: assets_discovery_data_center

This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Assets Discovery, which can be downloaded ...

📅 2024-02-20
CVSS 7.2 Dossier →
Component: confluence_data_center

This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data Center. This Stored XSS vulnerability, with a CVSS S...

📅 2024-02-20
CVSS 8.5 Dossier →
Component: sourcetree

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. ...

📅 2024-01-16
CVSS 7.8 Dossier →
Component: confluence_data_center

This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server. With a CVSS Score of 7....

📅 2024-01-16
CVSS 7.5 Dossier →
Component: confluence_data_center

This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server. Remote Code Execu...

📅 2024-01-16
CVSS 7.5 Dossier →
Component: confluence_data_center

This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server. Remote Code Exec...

📅 2024-01-16
CVSS 8.8 Dossier →
Component: confluence_data_center

This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server. Remote Code Execut...

📅 2024-01-16
CVSS 8.8 Dossier →
CVE-2023-22527 CRITICAL
Component: confluence_data_center

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affe...

📅 2024-01-16
CVSS 9.8 Dossier →
Component: confluence_data_center

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center. This RCE (Remote Code Exec...

📅 2024-01-16
CVSS 8.8 Dossier →
CVE-2023-22524 CRITICAL
Component: companion

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets...

📅 2023-12-06
CVSS 9.8 Dossier →
Component: assets_discovery_cloud

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent ins...

📅 2023-12-06
CVSS 8.8 Dossier →
Component: confluence_data_center

This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Conflu...

📅 2023-12-06
CVSS 8.8 Dossier →
Component: crowd

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. This RCE (Remote Code...

📅 2023-11-21
CVSS 8.8 Dossier →
Component: bamboo

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamboo Data Ce...

📅 2023-11-21
CVSS 8.8 Dossier →
CVE-2023-22518 CRITICAL
Component: confluence_data_center

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an ...

📅 2023-10-31
CVSS 9.8 Dossier →
CVE-2023-22515 CRITICAL
Component: confluence_data_center

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerab...

📅 2023-10-04
CVSS 9.8 Dossier →
Component: bitbucket_data_center

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE (Remote Cod...

📅 2023-09-19
CVSS 8.8 Dossier →
Page 2 of 20 (464 Total Records)