https://vulnogram.org/ Most recent CVEs assigned by Atlassian (atlassian). https://vulnogram.org/seaview/icons/atlassian.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-21589 https://vulnogram.org/CVE-2026-21589 This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an… Critical Known Exploited Mon, 05 Oct 2026 21:30:00 GMT https://vulnogram.org/CVE-2026-21588 https://vulnogram.org/CVE-2026-21588 This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS Score o… High Tue, 15 Sep 2026 17:00:00 GMT https://vulnogram.org/CVE-2026-21587 https://vulnogram.org/CVE-2026-21587 This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended… High Tue, 15 Sep 2026 17:00:00 GMT https://vulnogram.org/CVE-2026-21586 https://vulnogram.org/CVE-2026-21586 This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability,… High Tue, 15 Sep 2026 17:00:00 GMT https://vulnogram.org/CVE-2026-21584 https://vulnogram.org/CVE-2026-21584 This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated… High Tue, 18 Aug 2026 22:00:00 GMT https://vulnogram.org/CVE-2026-21582 https://vulnogram.org/CVE-2026-21582 This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM (Broken Authentication & Session Management) vulnerability, with a CVSS Score o… High Tue, 18 Aug 2026 22:00:00 GMT https://vulnogram.org/CVE-2026-21580 https://vulnogram.org/CVE-2026-21580 This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.… High Tue, 18 Aug 2026 22:00:00 GMT https://vulnogram.org/CVE-2026-21575 https://vulnogram.org/CVE-2026-21575 This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker… High Tue, 21 Jul 2026 17:00:00 GMT https://vulnogram.org/CVE-2026-21577 https://vulnogram.org/CVE-2026-21577 This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS Score of 7.1, a… High Tue, 21 Jul 2026 17:00:00 GMT https://vulnogram.org/CVE-2026-21579 https://vulnogram.org/CVE-2026-21579 This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Information Disclosure vulnerability, with a CVSS Score o… High Tue, 21 Jul 2026 17:00:00 GMT https://vulnogram.org/CVE-2026-21571 https://vulnogram.org/CVE-2026-21571 This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 9.4 and… Critical Tue, 21 Apr 2026 17:00:05 GMT https://vulnogram.org/CVE-2026-21570 https://vulnogram.org/CVE-2026-21570 This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 8.6,… High Tue, 17 Mar 2026 18:00:00 GMT https://vulnogram.org/CVE-2026-21569 https://vulnogram.org/CVE-2026-21569 This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. This XXE (XML External Entity Injection) vulnerability, with a CVSS Score of 7.9, allows an authenticated attacker t… High Wed, 28 Jan 2026 00:30:00 GMT https://vulnogram.org/CVE-2025-22178 https://vulnogram.org/CVE-2025-22178 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view items on the "Why" page. Medium Wed, 22 Oct 2025 16:30:04 GMT https://vulnogram.org/CVE-2025-22169 https://vulnogram.org/CVE-2025-22169 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the e… Medium Wed, 22 Oct 2025 16:30:04 GMT https://vulnogram.org/CVE-2025-22173 https://vulnogram.org/CVE-2025-22173 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required pe… Medium Wed, 22 Oct 2025 16:30:04 GMT https://vulnogram.org/CVE-2025-22170 https://vulnogram.org/CVE-2025-22170 Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action. Medium Wed, 22 Oct 2025 16:30:04 GMT https://vulnogram.org/CVE-2025-22174 https://vulnogram.org/CVE-2025-22174 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view portfolio rooms without the required permis… Medium Wed, 22 Oct 2025 16:30:04 GMT https://vulnogram.org/CVE-2025-22172 https://vulnogram.org/CVE-2025-22172 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the required permi… Medium Wed, 22 Oct 2025 16:30:03 GMT https://vulnogram.org/CVE-2025-22176 https://vulnogram.org/CVE-2025-22176 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view audit log items. Medium Wed, 22 Oct 2025 16:30:02 GMT https://vulnogram.org/CVE-2025-22171 https://vulnogram.org/CVE-2025-22171 Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users. Medium Wed, 22 Oct 2025 16:30:01 GMT https://vulnogram.org/CVE-2025-22168 https://vulnogram.org/CVE-2025-22168 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read the steps of another user's private checkli… Medium Wed, 22 Oct 2025 16:30:00 GMT https://vulnogram.org/CVE-2025-22177 https://vulnogram.org/CVE-2025-22177 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view other team overviews. Medium Wed, 22 Oct 2025 16:30:00 GMT https://vulnogram.org/CVE-2025-22175 https://vulnogram.org/CVE-2025-22175 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's private check… Medium Wed, 22 Oct 2025 16:30:00 GMT https://vulnogram.org/CVE-2025-22167 https://vulnogram.org/CVE-2025-22167 This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal (Arbitrary Write) vulnerability, with a CVSS Score… High Wed, 22 Oct 2025 01:00:06 GMT https://vulnogram.org/CVE-2025-22166 https://vulnogram.org/CVE-2025-22166 This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS Score of 8.3, allows an attacker to cause a resource to be unavailable for its i… High Tue, 21 Oct 2025 16:00:05 GMT https://vulnogram.org/CVE-2025-22165 https://vulnogram.org/CVE-2025-22165 This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac. This ACE (Arbitrary Code Execution) vulnerability, with a CVSS Score of 5.9, allows a locally authenticated attacker to execute a… Medium Thu, 24 Jul 2025 22:30:00 GMT https://vulnogram.org/CVE-2025-22157 https://vulnogram.org/CVE-2025-22157 This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center and Server Th… High Tue, 20 May 2025 18:00:01 GMT https://vulnogram.org/CVE-2023-22514 https://vulnogram.org/CVE-2023-22514 This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/A… High Tue, 18 Mar 2025 17:03:59 GMT https://vulnogram.org/CVE-2023-22512 https://vulnogram.org/CVE-2023-22512 This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server. With a CVSS Score of 7.5, this vulnerability allows an unauthenticated attacker to cause a resource to be unavailable for i… High Mon, 17 Mar 2025 22:34:42 GMT https://vulnogram.org/CVE-2019-15002 https://vulnogram.org/CVE-2019-15002 An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a result, an attacker can log a user into the system under an unexpected account. Medium Tue, 11 Feb 2025 17:24:15 GMT https://vulnogram.org/CVE-2024-21703 https://vulnogram.org/CVE-2024-21703 This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center and Server for Windows installations. This Security Misconfiguration vulnerability, with a CVSS Score of 6.4 allows an authenticate… Medium Wed, 27 Nov 2024 17:00:01 GMT https://vulnogram.org/CVE-2024-21697 https://vulnogram.org/CVE-2024-21697 This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 8.8, allows an unauthentic… High Tue, 19 Nov 2024 19:00:00 GMT https://vulnogram.org/CVE-2024-21690 https://vulnogram.org/CVE-2024-21690 This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was introduced in versions 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.1, 8.8.0, and 8.9.0 of Confluence Data Center and Server. This Reflec… High Wed, 21 Aug 2024 16:05:00 GMT https://vulnogram.org/CVE-2024-21689 https://vulnogram.org/CVE-2024-21689 This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of… High Tue, 20 Aug 2024 10:00:00 GMT https://vulnogram.org/CVE-2024-21684 https://vulnogram.org/CVE-2024-21684 There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbucket DC from 8.0.0 to 8.9.12 and 8.19.0 to 8.19.1 are affected by this vulnerability. It is patched in 8.9.13 and 8.19.2. This ope… Low Wed, 24 Jul 2024 18:00:01 GMT https://vulnogram.org/CVE-2024-21687 https://vulnogram.org/CVE-2024-21687 This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo Data Center and Server. This File Inclusion vulnerability, with a CVSS Score of 8.1, allows an authenticated attac… High Tue, 16 Jul 2024 20:30:00 GMT https://vulnogram.org/CVE-2024-21686 https://vulnogram.org/CVE-2024-21686 This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. This Stored XSS vulnerability, with a CVSS Score of 7.3, allows an authenticated attacker to execute arbitrary HTML or JavaScript code o… High Tue, 16 Jul 2024 20:00:02 GMT https://vulnogram.org/CVE-2024-21685 https://vulnogram.org/CVE-2024-21685 This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sen… High Tue, 18 Jun 2024 17:00:00 GMT https://vulnogram.org/CVE-2024-21683 https://vulnogram.org/CVE-2024-21683 This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arb… High Tue, 21 May 2024 23:00:00 GMT https://vulnogram.org/CVE-2024-21677 https://vulnogram.org/CVE-2024-21677 This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. This Path Traversal vulnerability, with a CVSS Score of 8.3, allows an unauthenticated attacker to exploit an undefinable vulnerability which… High Tue, 19 Mar 2024 17:00:00 GMT https://vulnogram.org/CVE-2024-21678 https://vulnogram.org/CVE-2024-21678 This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data Center. This Stored XSS vulnerability, with a CVSS Score of 8.5, allows an authenticated attacker to execute arbitrary HTML or JavaScript code on a victims… High Tue, 20 Feb 2024 18:00:00 GMT https://vulnogram.org/CVE-2024-21682 https://vulnogram.org/CVE-2024-21682 This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Assets Discovery, which can be downloaded via Atlassian Marketplace, is a network scanning tool that can be used with or without an agent with J… High Tue, 20 Feb 2024 18:00:00 GMT https://vulnogram.org/CVE-2024-21673 https://vulnogram.org/CVE-2024-21673 This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server. Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.0 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:H/UI:N… High Tue, 16 Jan 2024 05:00:00 GMT https://vulnogram.org/CVE-2024-21672 https://vulnogram.org/CVE-2024-21672 This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server. Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.3 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S… High Tue, 16 Jan 2024 05:00:00 GMT https://vulnogram.org/CVE-2023-22527 https://vulnogram.org/CVE-2023-22527 A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported… Critical Known Exploited Tue, 16 Jan 2024 05:00:00 GMT https://vulnogram.org/CVE-2024-21674 https://vulnogram.org/CVE-2024-21674 This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server. Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.6 and a CVSS Vector of CVSS:3.0/AV:N/AC:L/PR:N/UI:N/… High Tue, 16 Jan 2024 05:00:00 GMT https://vulnogram.org/CVE-2023-22526 https://vulnogram.org/CVE-2023-22526 This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrary c… High Tue, 16 Jan 2024 05:00:00 GMT https://vulnogram.org/CVE-2023-22522 https://vulnogram.org/CVE-2023-22522 This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Using this approach, an attacker is able to achieve Remote Code Execution (RCE) on an aff… Critical Wed, 06 Dec 2023 05:00:02 GMT https://vulnogram.org/CVE-2023-22523 https://vulnogram.org/CVE-2023-22523 This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight… Critical Wed, 06 Dec 2023 05:00:02 GMT