netVigilance Vulnerability intelligence since 2004

Atlassian

13 Atlassian vulnerabilities with confirmed exploitation in the wild, as published by CISA; 13 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Atlassian
Vulnerability Status
overdue 646d2024-12-03 CVE-2021-26086 Atlassian / Jira Server and Data Center Atlassian Jira Server and Data Center Path Traversal Vulnerability 2024-11-12 5.3 past due
overdue 939d2024-02-14 CVE-2023-22527 Atlassian / Confluence Data Center and Server Atlassian Confluence Data Center and Server Template Injection Vulnerability 2024-01-24 9.8 past dueransomware
overdue 1017d2023-11-28 CVE-2023-22518 Atlassian / Confluence Data Center and Server Atlassian Confluence Data Center and Server Improper Authorization Vulnerability 2023-11-07 9.8 past dueransomware
overdue 1063d2023-10-13 CVE-2023-22515 Atlassian / Confluence Data Center and Server Atlassian Confluence Data Center and Server Broken Access Control Vulnerability 2023-10-05 9.8 past dueransomware
overdue 1420d2022-10-21 CVE-2022-36804 Atlassian / Bitbucket Server and Data Center Atlassian Bitbucket Server and Data Center Command Injection Vulnerability 2022-09-30 8.8 past due
overdue 1483d2022-08-19 CVE-2022-26138 Atlassian / Confluence Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability 2022-07-29 9.8 past due
overdue 1557d2022-06-06 CVE-2022-26134 Atlassian / Confluence Server/Data Center Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability 2022-06-02 9.8 past dueransomware
overdue 1606d2022-04-18 CVE-2021-26085 Atlassian / Confluence Server Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability 2022-03-28 5.3 past dueransomware
overdue 1464d2022-09-07 CVE-2019-11581 Atlassian / Jira Server and Data Center Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability 2022-03-07 9.8 past due
overdue 1758d2021-11-17 CVE-2021-26084 Atlassian / Confluence Server and Data Center Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1591d2022-05-03 CVE-2019-3398 Atlassian / Confluence Server and Data Center Atlassian Confluence Server and Data Center Path Traversal Vulnerability 2021-11-03 8.8 past due
overdue 1591d2022-05-03 CVE-2019-3396 Atlassian / Confluence Server and Data Server Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1591d2022-05-03 CVE-2019-11580 Atlassian / Crowd and Crowd Data Center Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability 2021-11-03 9.8 past dueransomware