Atlassian Security Vulnerabilities (CVEs)

This XXE vulnerability in Crowd Data Center and Server allows authenticated attackers to read local files and potentially access remote content via XM...

Jira Align has an authorization vulnerability where low-privilege users can access endpoints they shouldn't, potentially viewing sensitive information...

Jira Align has an authorization vulnerability where low-privilege users can access endpoints they shouldn't, potentially viewing sensitive information...

Jira Align has an authorization vulnerability where low-privilege users can access endpoints they shouldn't, potentially viewing sensitive information...

Jira Align has an authorization vulnerability where low-privilege users can access endpoints they shouldn't, potentially viewing sensitive information...

Jira Align has an authorization vulnerability where low-privilege users can access endpoints they shouldn't, potentially exposing sensitive informatio...

Jira Align has an authorization bypass vulnerability where low-privilege users can perform actions they shouldn't by including a state-related paramet...

Jira Align has an authorization vulnerability where low-privilege users can modify other users' private checklists. This allows unauthorized data mani...

Jira Align has an authorization vulnerability where low-privilege users can access endpoints they shouldn't, potentially exposing sensitive informatio...

Jira Align has an authorization vulnerability where low-privilege users can access endpoints they shouldn't, potentially viewing sensitive sprint data...

Jira Align has an authorization vulnerability where low-privilege users can access endpoints they shouldn't, potentially viewing sensitive information...

Jira Align has an authorization vulnerability where low-privilege users can access endpoints they shouldn't, potentially viewing or modifying limited ...

This high-severity Denial of Service vulnerability in Confluence Data Center allows attackers to make resources unavailable to legitimate users by dis...

Agiloft Release 28 contains an XML External Entities (XXE) vulnerability in import/export functionality that allows authenticated attackers to perform...

Agiloft Release 28 contains a template injection vulnerability in its EUI template engine that allows authenticated attackers to execute arbitrary cod...

Agiloft Release 28 contains default credential accounts that could allow attackers to escalate privileges locally. The password hash is known and crac...

This CVE-2025-22165 is a Medium severity Arbitrary Code Execution vulnerability in Sourcetree for Mac that allows a locally authenticated attacker to ...

This CVE describes a Cross-Site Request Forgery (CSRF) vulnerability in Atlassian Jira, where the login form lacks a CSRF token, allowing attackers to...

This is a high-severity remote code execution vulnerability in Sourcetree Git clients that allows attackers to execute arbitrary code on affected syst...

This high-severity vulnerability in Confluence Data Center and Server allows unauthenticated attackers to execute reflected XSS attacks and CSRF attac...

This is an open redirect vulnerability in Bitbucket Data Center that allows unauthenticated attackers to redirect users to arbitrary websites after lo...

This is a stored cross-site scripting (XSS) vulnerability in Confluence Data Center and Server that allows authenticated attackers to inject malicious...

This is a high-severity remote code execution vulnerability in Confluence Data Center and Server that allows authenticated attackers to execute arbitr...

This is a high-severity path traversal vulnerability (CWE-22) in Confluence Data Center and Server that allows unauthenticated attackers to access or ...

This high-severity injection vulnerability (CWE-94) in Assets Discovery versions 1.0 through 6.2.0 allows authenticated attackers to modify system cal...

This is a high-severity denial-of-service vulnerability in Confluence Data Center and Server that allows unauthenticated attackers to disrupt service ...

This is a high-severity Remote Code Execution vulnerability in Atlassian Confluence Data Center and Server that allows authenticated attackers to exec...

This is a high-severity remote code execution vulnerability in Confluence Data Center and Server that allows authenticated attackers to execute arbitr...

This is a template injection vulnerability in Confluence Data Center and Server that allows authenticated attackers (including anonymous users) to inj...

This is a high-severity remote code execution vulnerability in Atlassian Bamboo Data Center and Server that allows authenticated attackers to execute ...

This is a high-severity remote code execution vulnerability in Bitbucket Data Center and Server that allows authenticated attackers to execute arbitra...

CVE-2023-22508 is a high-severity remote code execution vulnerability in Confluence Data Center & Server that allows authenticated attackers to execut...

This vulnerability allows remote attackers to browse local files on Atlassian Fisheye and Crucible servers via an Insecure Direct Object Reference (ID...

This vulnerability allows remote attackers with system administrator permissions in Atlassian Jira Server and Data Center to execute arbitrary code vi...

This CVE describes a DLL hijacking vulnerability in Atlassian Confluence Server and Data Center installers on Windows. Authenticated local attackers c...

This vulnerability allows remote attackers with administrator privileges in Atlassian Jira Server and Data Center to execute arbitrary code via the Em...

This vulnerability allows attackers with revoked administrator accounts to modify project Users & Roles settings in Atlassian Jira Server and Data Cen...

This vulnerability allows anonymous remote attackers to view private project and filter names in Atlassian Jira Server and Data Center via an Insecure...

This vulnerability allows unauthenticated remote attackers to view names of private projects and filters in Atlassian Jira Server and Data Center via ...