Vendor
Atlassian vulnerabilities under active attack
14 Atlassian vulnerabilities have confirmed evidence of exploitation in the wild, and 8 are used in ransomware campaigns.
14
confirmed exploited
8
used in ransomware
14
past fix deadline
- CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Atlassian · Multiple Products
- CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability Atlassian · Jira Server and Data Center
- CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Atlassian · Confluence Data Center and Server
- CVE-2022-36804 Atlassian Bitbucket Server and Data Center Command Injection Vulnerability Atlassian · Bitbucket Server and Data Center
- CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability Atlassian · Confluence
- CVE-2022-26134 Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Atlassian · Confluence Server/Data Center
- CVE-2021-26085 Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Atlassian · Confluence Server
- CVE-2019-11581 Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability Atlassian · Jira Server and Data Center
- CVE-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Vulnerability Atlassian · Confluence Server and Data Center
- CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Atlassian · Confluence Server and Data Center
- CVE-2019-11580 Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Atlassian · Crowd and Crowd Data Center
- CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Atlassian · Confluence Server and Data Server