CVE Program partner

atlassian

Atlassian

API
CVEs, 365 days25572 all time, 161 rejected
Quality66%median 99%
CVSS by the CNA100%share of records
CWE0%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationAtlassian
RoleCNA
TypeVendor, Open Source
Reports tomitre
ScopeAll Atlassian products, as well as Atlassian-maintained projects hosted on <a href='https://bitbucket.org/' target='_blank'>https://bitbucket.org/</a> and <a href='https://github.com/atlassian/' target='_blank'>https://github.com/atlassian/</a>.
Advisorieshttps://www.atlassian.com/trust/security/advisory-publishing-policy

Latest CVEs · RSS

  • CVE-2026-21588 2026-09-15 · CVSS 7.1
    This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0
  • CVE-2026-21587 2026-09-15 · CVSS 7.1
    This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization
  • CVE-2026-21586 2026-09-15 · CVSS 7.1
    This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2
  • CVE-2026-21584 2026-08-18 · CVSS 7.6
    This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center.
  • CVE-2026-21582 2026-08-18 · CVSS 8.8
    This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center.
  • CVE-2026-21580 2026-08-18 · CVSS 8.6
    This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0,
  • CVE-2026-21575 2026-07-21 · CVSS 7.1
    This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows. This RCE (Re
  • CVE-2026-21577 2026-07-21 · CVSS 7.1
    This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confl
  • CVE-2026-21579 2026-07-21 · CVSS 8.2
    This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0
  • CVE-2026-21571 2026-04-21 · CVSS 9.4
    This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bambo
  • CVE-2026-21570 2026-03-17 · CVSS 8.6
    This High severity RCE (Remote Code Execution)  vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Ba
  • CVE-2026-21569 2026-01-28 · CVSS 7.9
    This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. This XXE (XML External
  • CVE-2025-22178 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information.
  • CVE-2025-22169 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information.
  • CVE-2025-22173 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information.
  • CVE-2025-22170 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular
  • CVE-2025-22174 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information.
  • CVE-2025-22172 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information.
  • CVE-2025-22176 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information.
  • CVE-2025-22171 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users.
  • CVE-2025-22168 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information.
  • CVE-2025-22177 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information.
  • CVE-2025-22175 2025-10-22 · CVSS 5.3
    Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information.
  • CVE-2025-22167 2025-10-22 · CVSS 8.7
    This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data
  • CVE-2025-22166 2025-10-21 · CVSS 8.3
    This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability,

All CVE Program partners