Skip to content
THREATWIRE

CVE Tracker · Vendor

Atlassian CVEs

16 CVEs in the tracker, 14 in the CISA KEV catalogue.

All vendors · RSS feed for Atlassian · Tracker data last updated 18 Oct 2026.

Showing 16 of 16

  1. CVE-2026-21589No CVSSEPSS n/aKEV2026-10-05

    Multiple Products. Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

  2. CVE-2023-22527CVSS 9.8 criticalEPSS 100%KEV2024-01-16

    Confluence Data Center and Server. Atlassian Confluence Data Center and Server Template Injection Vulnerability

  3. CVE-2023-22518CVSS 9.8 criticalEPSS 100%KEV2023-10-31

    Confluence Data Center and Server. Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

  4. CVE-2023-22515CVSS 9.8 criticalEPSS 99.2%KEV2023-10-04

    Confluence Data Center and Server. Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

  5. CVE-2022-36804CVSS 8.8 highEPSS 99.2%KEV2022-08-25

    Bitbucket Server and Data Center. Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

  6. CVE-2022-26138CVSS 9.8 criticalEPSS 98.2%KEV2022-07-20

    Confluence. Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

  7. CVE-2022-26134CVSS 9.8 criticalEPSS 100%KEV2022-06-03

    Confluence Server/Data Center. Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

  8. CVE-2021-26084CVSS 9.8 criticalEPSS 100%KEV2021-08-30

    Confluence Server and Data Center. Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

  9. CVE-2021-26086CVSS 5.3 mediumEPSS 100%KEV2021-08-16

    Jira Server and Data Center. Atlassian Jira Server and Data Center Path Traversal Vulnerability

  10. CVE-2021-26085CVSS 5.3 mediumEPSS 100%KEV2021-08-03

    Confluence Server. Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

  11. CVE-2020-36289CVSS 5.3 mediumEPSS 99.2%2021-05-12

    data center. Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users v…

  12. CVE-2020-14181CVSS 5.3 mediumEPSS 100%2020-09-17

    data center. Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users v…

  13. CVE-2019-3396CVSS 9.8 criticalEPSS 100%KEV2019-03-25

    Confluence Server and Data Server. Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

  14. CVE-2019-3398No CVSSEPSS 97.0%KEV

    Confluence Server and Data Center. Atlassian Confluence Server and Data Center Path Traversal Vulnerability

  15. CVE-2019-11581No CVSSEPSS 84.6%KEV

    Jira Server and Data Center. Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

  16. CVE-2019-11580No CVSSEPSS 95.4%KEV

    Crowd and Crowd Data Center. Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability