Atlassian
14 Atlassian flaws are on CISA's list of vulnerabilities attackers have used, 1 of them added in 2026. CISA says 8 are known to be used by ransomware. The latest was added Oct 15, 2026.
14on CISA's list, all time
1added in 2026
1in the last 90 days
8used by ransomware
3zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Confluence Data Center and Server | 3 | Jan 24, 2024 |
| Jira Server and Data Center | 2 | Nov 12, 2024 |
| Confluence Server and Data Center | 2 | Nov 3, 2021 |
| Multiple Products | 1 | Oct 15, 2026 |
| Bitbucket Server and Data Center | 1 | Sep 30, 2022 |
| Confluence | 1 | Jul 29, 2022 |
| Confluence Server/Data Center | 1 | Jun 2, 2022 |
| Confluence Server | 1 | Mar 28, 2022 |
| Crowd and Crowd Data Center | 1 | Nov 3, 2021 |
| Confluence Server and Data Server | 1 | Nov 3, 2021 |
Latest Atlassian flaws
- Multiple ProductsAtlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- Jira Server and Data CenterAtlassian Jira Server and Data Center Path Traversal Vulnerability
- Confluence Data Center and ServerAtlassian Confluence Data Center and Server Template Injection Vulnerability
- Confluence Data Center and ServerAtlassian Confluence Data Center and Server Improper Authorization Vulnerability
- Confluence Data Center and ServerAtlassian Confluence Data Center and Server Broken Access Control Vulnerability
- Bitbucket Server and Data CenterAtlassian Bitbucket Server and Data Center Command Injection Vulnerability
- ConfluenceAtlassian Questions For Confluence App Hard-coded Credentials Vulnerability
- Confluence Server/Data CenterAtlassian Confluence Server and Data Center Remote Code Execution Vulnerability
- Confluence ServerAtlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
- Jira Server and Data CenterAtlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
- Crowd and Crowd Data CenterAtlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
- Confluence Server and Data ServerAtlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
- Confluence Server and Data CenterAtlassian Confluence Server and Data Center Path Traversal Vulnerability
- Confluence Server and Data CenterAtlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.