Atlassian Security Advisories & CVEs

61 advisories tracked · Atlassian ([email protected] CNA) via NVD · direct feeds checked every minute; rate-limited backstops use a safe source cadence

Android app · Google Play

Monitor Atlassian CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Get CVE alerts See app features

Check if your Atlassian device is affected

Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in Atlassian's recent advisories.

Official source

Atlassian ([email protected] CNA) via NVD

Atlassian is its own CVE Numbering Authority. VulniPulse ingests Atlassian's CVEs from the NVD CNA feed ([email protected]), each linking to its security advisory / Jira ticket. Covers Confluence (Server & Data Center), Jira (Software & Service Management), Bitbucket, Bamboo, Crowd and Fisheye/Crucible — self-hosted Confluence/Jira are repeatedly hit by mass-exploited RCE and auth-bypass bugs (CVE-2023-22515, CVE-2022-26134), so a huge patch-now audience.

Visit Atlassian security advisories Atlassian RSS feed Atlassian end-of-life dates(4 product families)

Latest Atlassian advisories

All severities critical high medium low

All platforms Confluence Jira Bitbucket Bamboo / Crowd / Fisheye

High7.8Atlassian

High [CVE-2020-36233] The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from…

The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.