Atlassian
14 vulnerabilities in Atlassian products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2026-21589 | Atlassian | Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 15 Oct 2026 | 18 Oct 2026 | Unknown |
| CVE-2021-26086 | Atlassian | Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | 12 Nov 2024 | 3 Dec 2024 | Unknown |
| CVE-2023-22527 | Atlassian | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability | 24 Jan 2024 | 14 Feb 2024 | Known |
| CVE-2023-22518 | Atlassian | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | 7 Nov 2023 | 28 Nov 2023 | Known |
| CVE-2023-22515 | Atlassian | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | 5 Oct 2023 | 13 Oct 2023 | Known |
| CVE-2022-36804 | Atlassian | Bitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 30 Sep 2022 | 21 Oct 2022 | Unknown |
| CVE-2022-26138 | Atlassian | Confluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | 29 Jul 2022 | 19 Aug 2022 | Unknown |
| CVE-2022-26134 | Atlassian | Confluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | 2 Jun 2022 | 6 Jun 2022 | Known |
| CVE-2021-26085 | Atlassian | Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | 28 Mar 2022 | 18 Apr 2022 | Known |
| CVE-2019-11581 | Atlassian | Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | 7 Mar 2022 | 7 Sep 2022 | Unknown |
| CVE-2019-11580 | Atlassian | Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2019-3396 | Atlassian | Confluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2019-3398 | Atlassian | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2021-26084 | Atlassian | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |