Priority CRITICAL 99KEV
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.99664 · Published 2026-10-05 · Fixed in Patch version 10.2.24 and later, Patch version 12.1.12 and later +14 CWE-552
Priority LOW 31
This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00397 · Published 2026-09-15 · Fixed in 10.2.17 to 10.2.18, 9.2.24 to 9.2.25 CWE-400
Priority LOW 34
This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2026-09-15 · Fixed in 11.3.11 CWE-285
Priority LOW 34
This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2026-09-15 · Fixed in 10.2.17 to 10.2.18, 9.2.24 to 9.2.25 CWE-285
Priority LOW 36
This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center.
CVSS 4.0HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.0046 · Published 2026-08-18 · Fixed in 12.1.10, 10.2.22 CWE-285
Priority MEDIUM 40
This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center.
CVSS 4.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00462 · Published 2026-08-18 · Fixed in 7.2.2 to 7.2.3 CWE-287
Priority MEDIUM 46
This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.…
CVSS 4.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.00508 · Published 2026-08-18 · Fixed in 10.2.13 to 10.2.15, 9.2.21 to 9.2.23 CWE-79
Priority LOW 38
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00589 · Published 2026-07-21 · Fixed in All versions from 3.4.13 CWE-94
Priority LOW 32
This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00426 · Published 2026-07-21 · Fixed in 10.2.7 to 10.2.14, 9.2.17 to 9.2.22 CWE-400
Priority LOW 36
This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00439 · Published 2026-07-21 · Fixed in 10.2.14, 9.2.22 CWE-200
Priority MEDIUM 45
This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.
CVSS 4.0CRITICAL 9.4· Network · Low privileges · No interaction · EPSS 0.01345 · Published 2026-04-21 · Fixed in 12.1.6, 10.2.18 +1 CWE-78
Priority MEDIUM 46
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00607 · Published 2026-03-17 · Fixed in 12.1.3, 10.2.16 +1 CWE-94
Priority LOW 34
This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server.
CVSS 3.0HIGH 7.9· Network · High privileges · No interaction · EPSS 0.00329 · Published 2026-01-28 · Fixed in 7.1.3 CWE-611
Priority LOW 23
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-862
Priority LOW 23
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00175 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority LOW 29
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority LOW 29
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority LOW 29
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority LOW 29
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority LOW 29
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority LOW 29
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00194 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority LOW 29
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00197 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority LOW 29
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority LOW 23
Jira Align is vulnerable to an authorization issue.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00175 · Published 2025-10-22 · Fixed in < 11.14.0, >= 11.16.1 CWE-285
Priority MEDIUM 40
This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00498 · Published 2025-10-22 · Fixed in 11.1.0 to 11.1.1, 10.3.12 +1 CWE-22
Load more
THREATIST.IORead the docs