Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Atlassian: actively exploited vulnerabilities

13 vulnerabilities in Atlassian products (Confluence Server / Data Center, Jira Server / Data Center, Bitbucket Server / Data Center…) are in CISA’s catalog of exploited vulnerabilities. Last added: November 12, 2024.

Atlassian security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Atlassian category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single Atlassian product (Confluence Server / Data Center, Jira Server / Data Center…) rather than the whole brand.

  • Confluence Server / Data Center9 vulnerabilities, Collaboration and video
  • Jira Server / Data Center2 vulnerabilities, Collaboration and video
  • Bitbucket Server / Data Center1 vulnerability, Development and CI/CD
  • Crowd1 vulnerability, Identity and access

Name used by CISA: Atlassian. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Atlassian list.

  1. Rank 1

    Atlassian Confluence Server / Data CenterCVE-2023-22527

    Atlassian Confluence Data Center and Server Template Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 24, 2024

  2. Rank 2

    Atlassian Confluence Server / Data CenterCVE-2023-22518

    Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 7, 2023

  3. Rank 3

    Atlassian Confluence Server / Data CenterCVE-2023-22515

    Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 5, 2023

  4. Rank 4

    Atlassian Confluence Server / Data CenterCVE-2022-26138

    Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

    CVSS severity 9.8critical

    Added Jul 29, 2022

  5. Rank 5

    Atlassian Confluence Server / Data CenterCVE-2022-26134

    Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jun 2, 2022

  6. Rank 6

    Atlassian Jira Server / Data CenterCVE-2019-11581

    Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Mar 7, 2022

  7. Rank 7

    Atlassian CrowdCVE-2019-11580

    Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  8. Rank 8

    Atlassian Confluence Server / Data CenterCVE-2019-3396

    Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  9. Rank 9

    Atlassian Confluence Server / Data CenterCVE-2021-26084

    Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  10. Rank 10

    Atlassian Bitbucket Server / Data CenterCVE-2022-36804

    Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

    CVSS severity 8.8high

    Added Sep 30, 2022

Show 3 more vulnerabilities
  1. Rank 11

    Atlassian Confluence Server / Data CenterCVE-2019-3398

    Atlassian Confluence Server and Data Center Path Traversal Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 8.8high

    Added Nov 3, 2021

  2. Rank 12

    Atlassian Jira Server / Data CenterCVE-2021-26086

    Atlassian Jira Server and Data Center Path Traversal Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 5.3medium

    Added Nov 12, 2024

  3. Rank 13

    Atlassian Confluence Server / Data CenterCVE-2021-26085

    Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

    Ransomware

    CVSS severity 5.3medium

    Added Mar 28, 2022

Follow and verify

Get new Atlassian vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.