Vulnerabilities in Atlassian
409 resultsCVE-2017-18097—The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Jira administrator to iEPSS 0.6%CVE-2021-39117—The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary EPSS 0.6%CVE-2020-4013—The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary HTML or Javascript viEPSS 0.6%CVE-2021-43941—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (including CsvFieldMappingsPagEPSS 0.6%CVE-2017-18041—The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTMLEPSS 0.6%CVE-2017-18040—The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaSEPSS 0.6%CVE-2026-21570HIGHThis High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0EPSS 0.6%CVE-2017-18094—Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allow remote attackers withEPSS 0.6%CVE-2018-5227—Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administraEPSS 0.6%CVE-2017-18084—The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript vEPSS 0.6%CVE-2021-26083—Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8EPSS 0.6%CVE-2019-15007—The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript viEPSS 0.6%CVE-2018-5229—The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remote attackers to injecEPSS 0.6%CVE-2017-16857—It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the bacEPSS 0.6%CVE-2019-20416—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scEPSS 0.6%CVE-2026-21575HIGHThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for WindoEPSS 0.6%CVE-2017-18034—The source browse resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 allows allows remote attackers that have write aEPSS 0.6%CVE-2017-18083—The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript vEPSS 0.6%CVE-2017-18082—The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrary HTML or JavaScriptEPSS 0.6%CVE-2021-43945—Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrarEPSS 0.6%