Vulnerabilidades en Atlassian
409 resultadosCVE-2026-21587HIGHThis High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center.
This ImEPSS 0.4%CVE-2024-21685HIGHThis High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center.
EPSS 0.4%CVE-2026-21579HIGHThis High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2EPSS 0.4%CVE-2021-43943—Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privileges to inject arbitrEPSS 0.4%CVE-2026-21577HIGHThis High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0EPSS 0.4%CVE-2023-22514HIGHThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for WindoEPSS 0.4%CVE-2021-43952—Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default configuration of fiEPSS 0.4%CVE-2026-21588HIGHThis High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2,EPSS 0.4%CVE-2019-20400—The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directory in the global patEPSS 0.4%CVE-2020-4019—The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different exEPSS 0.4%CVE-2021-43940HIGHAffected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the lEPSS 0.3%CVE-2026-21569HIGHThis High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server.
ThEPSS 0.3%CVE-2019-15002MEDIUMAn exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a EPSS 0.3%CVE-2020-36233—The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7EPSS 0.3%CVE-2018-13399—The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges becausEPSS 0.3%CVE-2024-21684LOWThere is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbucket DC from 8.0.0 tEPSS 0.2%CVE-2025-22173MEDIUMJira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of senEPSS 0.2%CVE-2025-22176MEDIUMJira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of senEPSS 0.2%CVE-2025-22174MEDIUMJira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of senEPSS 0.2%CVE-2025-22177MEDIUMJira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of senEPSS 0.2%