Cyberfeed6 › Vendors › Atlassian
CISA lists 14 Atlassian vulnerabilities as exploited in real attacks, and 8 of them are known to be used in ransomware campaigns. Most entries concern Confluence Data Center and Server, Jira Server and Data Center, Confluence Server and Data Center, Multiple Products.
Showing the 14 most recently added of 14. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | Multiple Products | 2026-10-15 | Critical (9.3) | No | Vendor notice |
| CVE-2021-26086Atlassian Jira Server and Data Center Path Traversal Vulnerability | Jira Server and Data Center | 2024-11-12 | Medium (5.3) | No | Vendor notice |
| CVE-2023-22527Atlassian Confluence Data Center and Server Template Injection Vulnerability | Confluence Data Center and Server | 2024-01-24 | Critical (10.0) | Yes | Vendor notice |
| CVE-2023-22518Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | Confluence Data Center and Server | 2023-11-07 | Critical (10.0) | Yes | Vendor notice |
| CVE-2023-22515Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | Confluence Data Center and Server | 2023-10-05 | Critical (10.0) | Yes | Vendor notice |
| CVE-2022-36804Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | Bitbucket Server and Data Center | 2022-09-30 | High (8.8) | No | Vendor notice |
| CVE-2022-26138Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | Confluence | 2022-07-29 | Critical (9.8) | No | Vendor notice |
| CVE-2022-26134Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | Confluence Server/Data Center | 2022-06-02 | Critical (9.8) | Yes | |
| CVE-2021-26085Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | Confluence Server | 2022-03-28 | Medium (5.3) | Yes | |
| CVE-2019-11581Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | Jira Server and Data Center | 2022-03-07 | Critical (9.8) | No | |
| CVE-2021-26084Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | Confluence Server and Data Center | 2021-11-03 | Critical (9.8) | Yes | |
| CVE-2019-3398Atlassian Confluence Server and Data Center Path Traversal Vulnerability | Confluence Server and Data Center | 2021-11-03 | High (8.8) | No | |
| CVE-2019-3396Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | Confluence Server and Data Server | 2021-11-03 | Critical (9.8) | Yes | |
| CVE-2019-11580Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | Crowd and Crowd Data Center | 2021-11-03 | Critical (9.8) | Yes |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.