Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Confluence Data Center
HIGH 8.8
This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server. Remote Code Exe…
Confluence Data Center
HIGH 7.5
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server. Remote Code Exec…
Confluence Data Center
HIGH 8.8
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center. This RCE (Remote Code Exe…
Companion
CRITICAL 9.8
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSocket…
Assets Discovery Cloud
HIGH 8.8
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent in…
Confluence Data Center
HIGH 8.8
This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confl…
Crowd
HIGH 8.8
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. This RCE (Remote Cod…
Bamboo
HIGH 8.8
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamboo Data C…
Confluence Data Center
CRITICAL 9.8
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an…
Confluence Data Center
CRITICAL 9.8
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnera…
Bitbucket Data Center
HIGH 8.8
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE (Remote Co…
Bamboo Data Center
HIGH 8.8
This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Cen…
Confluence Data Center
HIGH 8.8
This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of Confluence Data Center & Serv…
Confluence Data Center
HIGH 8.8
This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was introduced in version 8.0.0 of Confluence Data Center & Serv…
Confluence Server
MEDIUM 6.5
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload att…
Confluence Data Center
MEDIUM 5.3
Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a pr…
Jira Service Management
CRITICAL 9.1
An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user…
Bitbucket
CRITICAL 9.8
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control th…
Crowd
CRITICAL 9.8
Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability …
Confluence Data Center
HIGH 7.5
The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export i…
Confluence Data Center
HIGH 7.5
In the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is mishandled. An unauthenticated attacker could access files on…
Jira Align
HIGH 8.8
The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use…
Bitbucket
HIGH 8.8
Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from ver…
Jira Data Center
MEDIUM 6.1
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cr…
Jira Data Center
HIGH 7.2
This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been implemented. Affected ve…
Jira Service Desk
MEDIUM 5.7
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal …
Confluence Data Center
MEDIUM 5.4
The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and from version 7.7.0 before versio…
Bamboo
CRITICAL 9.8
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps…
Questions For Confluence
CRITICAL 9.8
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with…
Bamboo
HIGH 8.8
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the a…