Vulnerabilities in Atlassian
409 resultsCVE-2019-15012—Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.EPSS 1.6%CVE-2018-13386—There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permissionEPSS 1.6%CVE-2020-36288—The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and froEPSS 1.6%CVE-2023-22526HIGHThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center.
This RCE (RemoteEPSS 1.6%CVE-2020-36286—The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from vEPSS 1.6%CVE-2020-4029—The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2EPSS 1.6%CVE-2018-13400—Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before EPSS 1.5%CVE-2021-39118MEDIUMAffected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an eEPSS 1.5%CVE-2020-4027—Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass vEPSS 1.5%CVE-2018-20238—Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote attackers to authentEPSS 1.5%CVE-2024-21673HIGHThis High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server.
RemoteEPSS 1.5%CVE-2019-20105—The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, fEPSS 1.5%CVE-2019-11583—The issue searching component in Jira before version 8.1.0 allows remote attackers to deny access to Jira service via denial of service vulnEPSS 1.5%CVE-2019-20101MEDIUMAffected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access ContEPSS 1.5%CVE-2019-20403—The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or nEPSS 1.5%CVE-2021-43958CRITICALVarious rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login credentials as rest rEPSS 1.5%CVE-2018-13401—The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before versEPSS 1.5%CVE-2018-13402—Many resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, froEPSS 1.5%CVE-2021-39116—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of SEPSS 1.5%CVE-2018-13387—The IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7.0 before version 7.7.5, from version 7.8.0 EPSS 1.5%