Atlassian
14 CVEs in CISA KEV — 8 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2023-22518 |
Confluence Data Center and Server | — | 1.0000 | 2023-11-07 | 2023-11-28 | RW | Atlassian Confluence Data Center and Server contain an improper authorization vu |
CVE-2022-26134 |
Confluence Server/Data Center | — | 1.0000 | 2022-06-02 | 2022-06-06 | RW | Atlassian Confluence Server and Data Center contain a remote code execution vuln |
CVE-2023-22527 |
Confluence Data Center and Server | — | 0.9998 | 2024-01-24 | 2024-02-14 | RW | Atlassian Confluence Data Center and Server contain an unauthenticated OGNL temp |
CVE-2026-21589 |
Multiple Products | 9.3 | 0.9948 | 2026-10-15 | 2026-10-18 | Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira | |
CVE-2023-22515 |
Confluence Data Center and Server | — | 0.9922 | 2023-10-05 | 2023-10-13 | RW | Atlassian Confluence Data Center and Server contains a broken access control vul |
CVE-2022-36804 |
Bitbucket Server and Data Center | — | 0.9917 | 2022-09-30 | 2022-10-21 | Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a c | |
CVE-2022-26138 |
Confluence | — | 0.9824 | 2022-07-29 | 2022-08-19 | Atlassian Questions For Confluence App has hard-coded credentials, exposing the | |
CVE-2021-26086 |
Jira Server and Data Center | — | — | 2024-11-12 | 2024-12-03 | Atlassian Jira Server and Data Center contain a path traversal vulnerability tha | |
CVE-2021-26085 |
Confluence Server | — | — | 2022-03-28 | 2022-04-18 | RW | Affected versions of Atlassian Confluence Server allow remote attackers to view |
CVE-2019-11581 |
Jira Server and Data Center | — | — | 2022-03-07 | 2022-09-07 | Atlassian Jira Server and Data Center contain a server-side template injection v | |
CVE-2019-3398 |
Confluence Server and Data Center | — | — | 2021-11-03 | 2022-05-03 | Atlassian Confluence Server and Data Center contain a path traversal vulnerabili | |
CVE-2021-26084 |
Confluence Server and Data Center | — | — | 2021-11-03 | 2021-11-17 | RW | Atlassian Confluence Server and Data Server contain an Object-Graph Navigation L |
CVE-2019-11580 |
Crowd and Crowd Data Center | — | — | 2021-11-03 | 2022-05-03 | RW | Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerabil |
CVE-2019-3396 |
Confluence Server and Data Server | — | — | 2021-11-03 | 2022-05-03 | RW | Atlassian Confluence Server and Data Center contain a server-side template injec |