Atlassian: 악용된 취약점
- 14악용된 취약점
- 8랜섬웨어에 사용됨
- 2026. 10. 15.가장 최근 추가
- Confluence Data Center and Server 3
- Jira Server and Data Center 2
- Confluence Server and Data Center 2
- Multiple Products 1
- Bitbucket Server and Data Center 1
- Confluence 1
- Confluence Server/Data Center 1
- Confluence Server 1
- Confluence Server and Data Server 1
- Crowd and Crowd Data Center 1
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 15. | Files or Directories Accessible to External Parties | Multiple Products | 치명적 9.3 | 99.5% |
| 2024. 11. 12. | Path Traversal | Jira Server and Data Center | 보통 5.3 | >99.9% |
| 2024. 1. 24. | Template Injection | Confluence Data Center and Server | 치명적 10.0 | >99.9% |
| 2023. 11. 7. | Improper Authorization | Confluence Data Center and Server | 치명적 10.0 | >99.9% |
| 2023. 10. 5. | Broken Access Control | Confluence Data Center and Server | 치명적 10.0 | 99.2% |
| 2022. 9. 30. | Command Injection | Bitbucket Server and Data Center | 높음 8.8 | 99.1% |
| 2022. 7. 29. | Questions For Confluence App Hard-coded Credentials | Confluence | 치명적 9.8 | 98% |
| 2022. 6. 2. | Confluence Server and Data Center Remote Code Execution | Confluence Server/Data Center | 치명적 9.8 | >99.9% |
| 2022. 3. 28. | Pre-Authorization Arbitrary File Read | Confluence Server | 보통 5.3 | 99.9% |
| 2022. 3. 7. | Server-Side Template Injection | Jira Server and Data Center | 치명적 9.8 | 85% |
| 2021. 11. 3. | Object-Graph Navigation Language (OGNL) Injection | Confluence Server and Data Center | 치명적 9.8 | >99.9% |
| 2021. 11. 3. | Path Traversal | Confluence Server and Data Center | 높음 8.8 | 97% |
| 2021. 11. 3. | Confluence Server and Data Center Server-Side Template Injection | Confluence Server and Data Server | 치명적 9.8 | 99.9% |
| 2021. 11. 3. | Remote Code Execution | Crowd and Crowd Data Center | 치명적 9.8 | 95% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.