Read the docs

Atlassian

Records478All Threatist records
Exploited (KEV)14In CISA KEV
CVSS critical51CVSS 9.0–10.0
CVSS high130CVSS 7.0–8.9

Exploited now

Atlassian records in CISA KEV
TI-2026-67904 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Priority CRITICAL 99KEV 2026-10-15TI-2021-08038 Atlassian Jira Server and Data Center Path Traversal Vulnerability Priority HIGH 81KEV 2024-11-12TI-2023-08765 Atlassian Confluence Data Center and Server Template Injection Vulnerability Priority CRITICAL 100KEV 2024-01-24TI-2023-08759 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Priority CRITICAL 99KEV 2023-11-07TI-2023-08757 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Priority CRITICAL 100KEV 2023-10-05TI-2022-17043 Atlassian Bitbucket Server and Data Center Command Injection Vulnerability Priority CRITICAL 97KEV 2022-09-30

Components

Products in the NVD configurations · select one to filter the records
Jira 142 records HIGH Jira Server 135 records CRITICAL Jira Data Center 80 records CRITICAL Crucible 53 records CRITICAL Fisheye 53 records CRITICAL Confluence Server 49 records CRITICAL Confluence Data Center 39 records CRITICAL Jira Software Data Center 39 records MEDIUM

Records

16 records in Sourcetree · all components

TI-2018-14343 CVE-2018-20236 · GHSA-52v2-8xvg-r55r

Command injection in Atlassian Sourcetree for Windows

Priority MEDIUM 47

There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0644 Published 2019-03-08 Fixed in 3.0.10 CWE-77
TI-2017-10694 CVE-2017-14593 · GHSA-2h25-2cpj-6h2c

Command injection in Atlassian Sourcetree for Windows

Priority MEDIUM 46

Sourcetree for Windows had several argument and command injection bugs in Mercurial and Git repository handling.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05516 Published 2018-01-26 No fix listed CWE-77
TI-2017-10693 CVE-2017-14592 · GHSA-gpjg-fjjx-7625

Command injection in Atlassian Sourcetree for macOS

Priority MEDIUM 46

Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05516 Published 2018-01-26 No fix listed CWE-77
TI-2026-17401 CVE-2026-21575 · GHSA-rrh5-678c-6wj4

Code injection in Atlassian Sourcetree for Mac

Priority LOW 38

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00589 Published 2026-07-21 Fixed in All versions from 3.4.13 CWE-94
TI-2023-08756 CVE-2023-22514 · GHSA-hjgh-vh3c-8rg8

Code injection in Atlassian Sourcetree for Mac

Priority LOW 36

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00422 Published 2025-03-18 Fixed in < 3.4.14, >= 3.4.15 CWE-94
TI-2025-16101 CVE-2025-22165 · GHSA-g98p-wqr8-r32r

Improper privilege management in Atlassian Sourcetree for Mac

Priority LOW 28

This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac.

CVSS 4.0MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00157 Published 2025-07-24 Fixed in All versions from 4.2.12 CWE-269
Open these records in search →