Atlassian：悪用された脆弱性
- 14件の悪用された脆弱性
- 8ランサムウェアで使用
- 2026/10/15最新の追加
- Confluence Data Center and Server 3
- Jira Server and Data Center 2
- Confluence Server and Data Center 2
- Multiple Products 1
- Bitbucket Server and Data Center 1
- Confluence 1
- Confluence Server/Data Center 1
- Confluence Server 1
- Confluence Server and Data Server 1
- Crowd and Crowd Data Center 1
| 追加日 | 脆弱性 | 製品 | 深刻度 | 攻撃の可能性 |
|---|---|---|---|---|
| 2026/10/15 | Files or Directories Accessible to External Parties | Multiple Products | 緊急 9.3 | 99.7% |
| 2024/11/12 | Path Traversal | Jira Server and Data Center | 中 5.3 | >99.9% |
| 2024/01/24 | Template Injection | Confluence Data Center and Server | 緊急 10.0 | >99.9% |
| 2023/11/07 | Improper Authorization | Confluence Data Center and Server | 緊急 10.0 | >99.9% |
| 2023/10/05 | Broken Access Control | Confluence Data Center and Server | 緊急 10.0 | 99.2% |
| 2022/09/30 | Command Injection | Bitbucket Server and Data Center | 高 8.8 | 99% |
| 2022/07/29 | Questions For Confluence App Hard-coded Credentials | Confluence | 緊急 9.8 | 98% |
| 2022/06/02 | Confluence Server and Data Center Remote Code Execution | Confluence Server/Data Center | 緊急 9.8 | >99.9% |
| 2022/03/28 | Pre-Authorization Arbitrary File Read | Confluence Server | 中 5.3 | 99.9% |
| 2022/03/07 | Server-Side Template Injection | Jira Server and Data Center | 緊急 9.8 | 85% |
| 2021/11/03 | Object-Graph Navigation Language (OGNL) Injection | Confluence Server and Data Center | 緊急 9.8 | >99.9% |
| 2021/11/03 | Path Traversal | Confluence Server and Data Center | 高 8.8 | 97% |
| 2021/11/03 | Confluence Server and Data Center Server-Side Template Injection | Confluence Server and Data Server | 緊急 9.8 | 99.9% |
| 2021/11/03 | Remote Code Execution | Crowd and Crowd Data Center | 緊急 9.8 | 95% |
出典：Known Exploited Vulnerabilities（CISA、パブリックドメイン）、CVE records（cve.org）、EPSS（FIRST）。攻撃の可能性は、今後30日以内に誰かがその脆弱性の悪用を試みるというEPSSの推定値です。