Atlassian: vulnerabilidades exploradas
- 14vulnerabilidades exploradas
- 8usada por ransomware
- 15 de out. de 2026a mais recente
- Confluence Data Center and Server 3
- Jira Server and Data Center 2
- Confluence Server and Data Center 2
- Multiple Products 1
- Bitbucket Server and Data Center 1
- Confluence 1
- Confluence Server/Data Center 1
- Confluence Server 1
- Confluence Server and Data Server 1
- Crowd and Crowd Data Center 1
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 15 de out. de 2026 | Files or Directories Accessible to External Parties | Multiple Products | Crítica 9,3 | 99,5% |
| 12 de nov. de 2024 | Path Traversal | Jira Server and Data Center | Média 5,3 | >99,9% |
| 24 de jan. de 2024 | Template Injection | Confluence Data Center and Server | Crítica 10,0 | >99,9% |
| 7 de nov. de 2023 | Improper Authorization | Confluence Data Center and Server | Crítica 10,0 | >99,9% |
| 5 de out. de 2023 | Broken Access Control | Confluence Data Center and Server | Crítica 10,0 | 99,2% |
| 30 de set. de 2022 | Command Injection | Bitbucket Server and Data Center | Alto 8,8 | 99,1% |
| 29 de jul. de 2022 | Questions For Confluence App Hard-coded Credentials | Confluence | Crítica 9,8 | 98% |
| 2 de jun. de 2022 | Confluence Server and Data Center Remote Code Execution | Confluence Server/Data Center | Crítica 9,8 | >99,9% |
| 28 de mar. de 2022 | Pre-Authorization Arbitrary File Read | Confluence Server | Média 5,3 | 99,9% |
| 7 de mar. de 2022 | Server-Side Template Injection | Jira Server and Data Center | Crítica 9,8 | 85% |
| 3 de nov. de 2021 | Object-Graph Navigation Language (OGNL) Injection | Confluence Server and Data Center | Crítica 9,8 | >99,9% |
| 3 de nov. de 2021 | Path Traversal | Confluence Server and Data Center | Alto 8,8 | 97% |
| 3 de nov. de 2021 | Confluence Server and Data Center Server-Side Template Injection | Confluence Server and Data Server | Crítica 9,8 | 99,9% |
| 3 de nov. de 2021 | Remote Code Execution | Crowd and Crowd Data Center | Crítica 9,8 | 95% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.