Atlassian vulnerabilities

CVEs per yearBy the year they were published

1. 201943
2. 202085
3. 202171
4. 202215
5. 202268
6. 202266
7. 202415
8. 202418
9. 202515
10. 202613

Known exploitedNewest addition to KEV first

• CVE-2026-21589

  This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center.…

  Atlassian · Bamboo Data Center

  ExploitedCritical9.3
• CVE-2021-26086

  Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the…

  Atlassian · Jira Server

  ExploitedMedium5.3
• CVE-2023-22527

  A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected…

  Atlassian · Confluence Data Center

  ExploitedCritical10.0
• CVE-2023-22518

  All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an…

  Atlassian · Confluence Data Center

  ExploitedCritical10.0
• CVE-2023-22515

  Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in…

  Atlassian · Confluence Data Center

  ExploitedCritical10.0
• CVE-2022-36804

  Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version…

  Atlassian · Bitbucket Server

  ExploitedHigh8.8
• CVE-2022-26138

  The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the…

  Atlassian · Questions For Confluence

  ExploitedCritical9.8
• CVE-2022-26134

  In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute…

  Atlassian · Confluence Data Center

  ExploitedCritical9.8
• CVE-2021-26085

  Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability…

  Atlassian · Confluence Server

  ExploitedMedium5.3
• CVE-2019-11581

  There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker…

  Atlassian · Jira Server and Data Center

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-21589

  This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center.…

  Atlassian · Bamboo Data Center

  ExploitedCritical9.3
• CVE-2026-21588

  This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0…

  Atlassian · Confluence Data Center

  High7.1
• CVE-2026-21587

  This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization…

  Atlassian · Jira Service Management Data Center

  High7.1
• CVE-2026-21586

  This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1,…

  Atlassian · Confluence Data Center

  High7.1
• CVE-2026-21584

  This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center.…

  Atlassian · Bamboo Data Center

  High7.6
• CVE-2026-21582

  This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data…

  Atlassian · Crowd Data Center

  High8.8
• CVE-2026-21580

  This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0,…

  Atlassian · Confluence Data Center

  High8.6
• CVE-2026-21575

  This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows. This RCE…

  Atlassian · Sourcetree for Mac

  High7.1
• CVE-2026-21577

  This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of…

  Atlassian · Confluence Data Center

  High7.1
• CVE-2026-21579

  This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and…

  Atlassian · Confluence Data Center

  High8.2