Read the docs

Atlassian

Records478All Threatist records
Exploited (KEV)14In CISA KEV
CVSS critical51CVSS 9.0–10.0
CVSS high130CVSS 7.0–8.9

Exploited now

Atlassian records in CISA KEV
TI-2026-67904 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Priority CRITICAL 99KEV 2026-10-15TI-2021-08038 Atlassian Jira Server and Data Center Path Traversal Vulnerability Priority HIGH 81KEV 2024-11-12TI-2023-08765 Atlassian Confluence Data Center and Server Template Injection Vulnerability Priority CRITICAL 100KEV 2024-01-24TI-2023-08759 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Priority CRITICAL 99KEV 2023-11-07TI-2023-08757 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Priority CRITICAL 100KEV 2023-10-05TI-2022-17043 Atlassian Bitbucket Server and Data Center Command Injection Vulnerability Priority CRITICAL 97KEV 2022-09-30

Components

Products in the NVD configurations · select one to filter the records
Jira 142 records HIGH Jira Server 135 records CRITICAL Jira Data Center 80 records CRITICAL Crucible 53 records CRITICAL Fisheye 53 records CRITICAL Confluence Server 49 records CRITICAL Confluence Data Center 39 records CRITICAL Jira Software Data Center 39 records MEDIUM

Records

13 records in Jira Align · all components

TI-2022-17042 CVE-2022-36803 · GHSA-7hpj-mxfh-5j9j

Incorrect default permissions in Atlassian Jira Align

Priority MEDIUM 41

The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to Super Admin.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00686 Published 2022-10-14 Fixed in 10.109.2 CWE-276
TI-2025-16113 CVE-2025-22177 · GHSA-pv32-qpg6-rfqj

Improper authorization in Atlassian Jira Align

Priority LOW 29

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
TI-2025-16112 CVE-2025-22176 · GHSA-f99g-2v54-2pqf

Improper authorization in Atlassian Jira Align

Priority LOW 29

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
TI-2025-16110 CVE-2025-22174 · GHSA-3ppx-8h63-84vp

Improper authorization in Atlassian Jira Align

Priority LOW 29

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
TI-2025-16109 CVE-2025-22173 · GHSA-9h8c-j33x-7868

Improper authorization in Atlassian Jira Align

Priority LOW 29

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
TI-2025-16108 CVE-2025-22172 · GHSA-f5f3-6jhh-mfqc

Improper authorization in Atlassian Jira Align

Priority LOW 29

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
TI-2025-16107 CVE-2025-22171 · GHSA-wjmx-g8v6-8x9w

Improper authorization in Atlassian Jira Align

Priority LOW 29

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00194 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
TI-2025-16106 CVE-2025-22170 · GHSA-j48g-f46f-j274

Improper authorization in Atlassian Jira Align

Priority LOW 29

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
TI-2025-16104 CVE-2025-22168 · GHSA-j5cm-xx5g-jmg5

Improper authorization in Atlassian Jira Align

Priority LOW 29

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00197 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
TI-2022-17041 CVE-2022-36802 · GHSA-r626-8pv5-vwq9

Server-side request forgery in Atlassian Jira Align

Priority LOW 24

The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01037 Published 2022-10-14 Fixed in 10.109.2 CWE-918
TI-2025-16114 CVE-2025-22178 · GHSA-2p9w-4jwx-hjx2

Missing authorization in Atlassian Jira Align

Priority LOW 23

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-862
TI-2025-16111 CVE-2025-22175 · GHSA-gq47-78wr-x9rx

Improper authorization in Atlassian Jira Align

Priority LOW 23

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00175 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
TI-2025-16105 CVE-2025-22169 · GHSA-52jh-vhcr-cg5r

Improper authorization in Atlassian Jira Align

Priority LOW 23

Jira Align is vulnerable to an authorization issue.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00175 Published 2025-10-22 Fixed in < 11.14.0, >= 11.16.1 CWE-285
Open these records in search →