https://exploit-radar.com/en/flux/marques/atlassian.xml Exploit Radar: exploited Atlassian vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Atlassian products. 2024-11-12T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2021-26086/ CVE-2021-26086 — Atlassian Jira Server / Data Center 2024-11-12T00:00:00Z Apply the patches or mitigations from Atlassian; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 12, 2024. https://exploit-radar.com/en/cve/CVE-2023-22527/ CVE-2023-22527 — Atlassian Confluence Server / Data Center 2024-01-24T00:00:00Z Apply the patches or mitigations from Atlassian; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 24, 2024. https://exploit-radar.com/en/cve/CVE-2023-22518/ CVE-2023-22518 — Atlassian Confluence Server / Data Center 2023-11-07T00:00:00Z Apply the patches or mitigations from Atlassian; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 7, 2023. https://exploit-radar.com/en/cve/CVE-2023-22515/ CVE-2023-22515 — Atlassian Confluence Server / Data Center 2023-10-05T00:00:00Z Apply the patches or mitigations from Atlassian; if none are available, stop using the product. CISA deadline: 8 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 5, 2023. https://exploit-radar.com/en/cve/CVE-2022-36804/ CVE-2022-36804 — Atlassian Bitbucket Server / Data Center 2022-09-30T00:00:00Z Apply the security update from Atlassian. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 30, 2022. https://exploit-radar.com/en/cve/CVE-2022-26138/ CVE-2022-26138 — Atlassian Confluence Server / Data Center 2022-07-29T00:00:00Z Apply the security update from Atlassian. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 29, 2022. https://exploit-radar.com/en/cve/CVE-2022-26134/ CVE-2022-26134 — Atlassian Confluence Server / Data Center 2022-06-02T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 4 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on June 2, 2022. https://exploit-radar.com/en/cve/CVE-2021-26085/ CVE-2021-26085 — Atlassian Confluence Server / Data Center 2022-03-28T00:00:00Z Apply the security update from Atlassian. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2019-11581/ CVE-2019-11581 — Atlassian Jira Server / Data Center 2022-03-07T00:00:00Z Apply the security update from Atlassian. CISA deadline: 184 days. Added to CISA’s catalog of exploited vulnerabilities on March 7, 2022. https://exploit-radar.com/en/cve/CVE-2019-11580/ CVE-2019-11580 — Atlassian Crowd 2021-11-03T00:00:00Z Apply the security update from Atlassian. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-3396/ CVE-2019-3396 — Atlassian Confluence Server / Data Center 2021-11-03T00:00:00Z Apply the security update from Atlassian. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-26084/ CVE-2021-26084 — Atlassian Confluence Server / Data Center 2021-11-03T00:00:00Z Apply the security update from Atlassian. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-3398/ CVE-2019-3398 — Atlassian Confluence Server / Data Center 2021-11-03T00:00:00Z Apply the security update from Atlassian. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.