Browse CVEs

HIGH 8.8 CVE-2024-21697 This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Win… Sourcetree Mitigation only Fix from $1,9502024-11-19 MEDIUM 6.1 CVE-2017-18090 Various resources in Atlassian Fisheye before version 4.5.1 (the fixed version for 4.5.x) and before version 4.6.0 allow remote attackers to inject a… Fisheye Mitigation only Fix from $1,6002018-02-16 HIGH 8.5 CVE-2017-16857 It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the back-end. Th… Bitbucket Auto Unapprove Plugin Mitigation only Fix from $1,9502017-12-05 HIGH 8.8 CVE-2017-9514 Bamboo before 6.0.5, 6.1.x before 6.1.4, and 6.2.x before 6.2.1 had a REST endpoint that parsed a YAML file and did not sufficiently restrict which c… Bamboo Mitigation only Fix from $1,9502017-10-12 MEDIUM 5.4 CVE-2017-9508 Various resources in Atlassian Fisheye and Crucible before version 4.4.1 allow remote attackers to inject arbitrary HTML or JavaScript via a cross si… Crucible Mitigation only Fix from $1,6002017-08-24 MEDIUM 6.1 CVE-2017-9506EPSS 72% The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote a… Oauth No fix yet Fix from $1,6002017-08-23 HIGH 8.8 CVE-2017-8907 Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permission and t… Bamboo Mitigation only Fix from $1,9502017-06-14 HIGH 7.5 CVE-2017-7415 Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource. Confluence Server No fix yet Fix from $1,9502017-04-27 CRITICAL 9.8 CVE-2017-5983EPSS 16% The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers… Jira Mitigation only Fix from $2,3002017-04-10 HIGH 7.5 CVE-2016-6668 The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat … Confluence Server No fix yet Fix from $1,9502017-01-23 MEDIUM 6.8 CVE-2012-6342 Cross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6 allows remote attackers to hijack the authentication o… Confluence Server No fix yet Fix from $1,6002014-05-13 HIGH 7.5 CVE-2013-3926 Atlassian Crowd 2.6.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to a "symmetric backdoor." NOTE: as of 2… Crowd No fix yet Fix from $1,9502013-07-01 MEDIUM 5.8 CVE-2013-3925 Atlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers to read arbitrary files and send HTTP requests to in… Crowd No fix yet Fix from $1,6002013-07-01 MEDIUM 6.8 CVE-2008-6832 Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of uns… Jira No fix yet Fix from $1,6002009-06-08 MEDIUM 5.0 CVE-2006-3339 secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations o… Jira Mitigation only Fix from $1,6002006-07-03