Atlassian

Number 46 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Combines these spellings from source records: Atlassian, atlassian

Total vulnerabilities

410

Critical

High

Known Exploited

Exploit available

Network, no login needed

48.3%

Of 120 scored records

New vulnerabilities per year, by severity

80 40

201719 total:Critical: 0High: 3Medium: 0Low: 0None or not scored: 16
201871 total:Critical: 0High: 0Medium: 0Low: 0None or not scored: 71
2018
201969 total:Critical: 3High: 1Medium: 0Low: 0None or not scored: 65
202080 total:Critical: 0High: 0Medium: 0Low: 0None or not scored: 80
202171 total:Critical: 3High: 12Medium: 14Low: 0None or not scored: 42
202237 total:Critical: 8High: 9Medium: 4Low: 0None or not scored: 16
2022
202314 total:Critical: 6High: 6Medium: 2Low: 0None or not scored: 0
202418 total:Critical: 1High: 14Medium: 2Low: 1None or not scored: 0
202518 total:Critical: 0High: 5Medium: 13Low: 0None or not scored: 0
2026 (incomplete)13 total:Critical: 2High: 11Medium: 0Low: 0None or not scored: 0
2026

Show as table

Period	Total	Critical	High	Medium	Low	None or not scored
2026 (incomplete)	13	2	11	0	0	0
2025	18	0	5	13	0	0
2024	18	1	14	2	1	0
2023	14	6	6	2	0	0
2022	37	8	9	4	0	16
2021	71	3	12	14	0	42
2020	80	0	0	0	0	80
2019	69	3	1	0	0	65
2018	71	0	0	0	0	71
2017	19	0	3	0	0	16

Top products

Bug type	Total	Critical/High
Code Injection	16	16
Incorrect Authorization	15	2
Improper Authorization	13	3
Authentication Issues	9	7
Path Traversal	7	6
Cross-Site Scripting	6	4
Improper Access Control	4	1
Insecure Direct Object Reference	4	4
Server-Side Request Forgery	4	0
Command Injection	3	3

CVE	Title	Published	Severity	EPSS
CVE-2026-21589	Atlassian Bamboo Data Center vulnerability	2026-10-05	Critical	99.7%
CVE-2023-22527	Atlassian Confluence Data Center vulnerability	2024-01-16	Critical	100.0%
CVE-2023-22518	Atlassian Confluence Data Center: Incorrect Authorization	2023-10-31	Critical	100.0%
CVE-2023-22515	Atlassian Confluence Data Center: Improper Input Validation	2023-10-04	Critical	99.2%
CVE-2022-36804	Atlassian Bitbucket Server: Command Injection	2022-08-25	High	99.1%
CVE-2022-26138	Atlassian Questions For Confluence: Hard-coded Credentials	2022-07-20	Critical	98.2%
CVE-2022-26134	Atlassian Confluence Data Center: Expression Language Injection	2022-06-03	Critical	100.0%
CVE-2021-26084	Atlassian Confluence Server: Expression Language Injection	2021-08-30	Critical	100.0%
CVE-2021-26086	Atlassian Jira Server: Path Traversal	2021-08-16	Medium	100.0%
CVE-2021-26085	Atlassian Confluence Server vulnerability	2021-08-03	Medium	99.9%

CVE	Title	Published	Severity	EPSS
CVE-2026-21589	Atlassian Bamboo Data Center vulnerability	2026-10-05	Critical	99.7%
CVE-2026-21588	Atlassian Confluence Data Center: Denial of Service	2026-09-15	High	0.4%
CVE-2026-21587	Atlassian Jira Service Management Data Center vulnerability	2026-09-15	High	0.4%
CVE-2026-21586	Atlassian Confluence Data Center vulnerability	2026-09-15	High	0.4%
CVE-2026-21584	Atlassian Bamboo Data Center vulnerability	2026-08-18	High	0.5%
CVE-2026-21582	Atlassian Crowd Data Center: Authentication Issues	2026-08-18	High	0.5%
CVE-2026-21580	Atlassian Confluence Data Center: Cross-Site Scripting	2026-08-18	High	0.5%
CVE-2026-21579	Atlassian Confluence Data Center: Information Disclosure	2026-07-21	High	0.4%
CVE-2026-21577	Atlassian Confluence Data Center: Denial of Service	2026-07-21	High	0.4%
CVE-2026-21575	Atlassian Sourcetree for Mac: Code Injection	2026-07-21	High	0.6%