Vulnerabilidades en Atlassian
409 resultadosCVE-2017-18038—The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrEPSS 1.4%CVE-2018-5226—There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An atEPSS 1.4%CVE-2017-18105—The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers, who EPSS 1.4%CVE-2024-21672HIGHThis High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server.
Remote CEPSS 1.4%CVE-2026-21571CRITICALThis Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0,
11.0.0, 11.1.0, 12.0.0,EPSS 1.3%CVE-2019-15005—The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans anEPSS 1.3%CVE-2021-39111—The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version 8.14.0 before EPSS 1.3%CVE-2020-36237—Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an InformEPSS 1.3%CVE-2020-36236—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site ScEPSS 1.3%CVE-2021-26076—The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version 8.6.0 befoEPSS 1.3%CVE-2021-39127MEDIUMAffected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL endpoint via a BrokenEPSS 1.3%CVE-2019-20898—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticateEPSS 1.3%CVE-2017-18037—The git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14.11 (the fixed version for 4.14.x), from veEPSS 1.3%CVE-2019-11585—The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2EPSS 1.3%CVE-2020-14174—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure DirectEPSS 1.3%CVE-2020-36231—Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have accessEPSS 1.3%CVE-2019-20404—The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determine project titles theyEPSS 1.3%CVE-2021-43957HIGHAffected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References (IEPSS 1.3%CVE-2021-26080—EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8.EPSS 1.3%CVE-2020-14183—Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instance's SupportEPSS 1.3%