Patchfirst
Patchfirst

Vendor

Atlassian

14 of 30 Atlassian CVEs in Patchfirst (47%) are in of vulnerabilities exploited in the wild, 8 of them used by ransomware.

CVEs
30
In CISA KEV
1447%
Known ransomware use
8
Median days to KEV
65
from publication
Latest KEV listing
15 Oct 2026
Watch Atlassian Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Confluence Data Center and Server In KEV: 3 CVEs: 3
  • Confluence Server and Data Center In KEV: 2 CVEs: 2
  • Jira Server and Data Center In KEV: 2 CVEs: 2
  • Confluence Server In KEV: 1 CVEs: 2
  • Bitbucket Server and Data Center In KEV: 1 CVEs: 1
  • Confluence In KEV: 1 CVEs: 1
  • Confluence Server and Data Server In KEV: 1 CVEs: 1
  • Confluence Server/Data Center In KEV: 1 CVEs: 1
  • Crowd and Crowd Data Center In KEV: 1 CVEs: 1
  • Multiple Products In KEV: 1 CVEs: 1

Top ATT&CK techniques

What attackers do with Atlassian CVEs
Open in ATT&CK Navigator

Counts are Atlassian CVEs linked to the technique. Each link’s provenance is on the CVE page.

Atlassian CVEs

30 CVEs, by priority
  1. CVE-2021-26084Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
    Atlassian · Confluence Server and Data CenterKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1496Resource Hijacking3 reports
    >99.9%Top 0.01%
    87.6priority
  2. CVE-2022-26134Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
    Atlassian · Confluence Server/Data CenterKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application2 reports
    >99.9%Top 0.01%
    86.0priority
  3. CVE-2022-26138Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
    Atlassian · ConfluenceKEVPublic exploitCritical · 9.8T1552.001Credentials In Files1 report
    98.2%Top 0.08%
    83.7priority
  4. CVE-2019-3396Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
    Atlassian · Confluence Server and Data ServerKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1202Indirect Command Execution+1 more · 1 report
    99.9%Top 0.03%
    83.7priority
  5. CVE-2023-22527Atlassian Confluence Data Center and Server Template Injection Vulnerability
    Atlassian · Confluence Data Center and ServerKEVRansomwarePublic exploitCritical · 9.8T1496Resource Hijacking
    >99.9%Top 0.02%
    79.9priority
  6. CVE-2023-22518Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
    Atlassian · Confluence Data Center and ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1033System Owner/User Discovery+1 more
    >99.9%Top 0.01%
    79.9priority
  7. CVE-2023-22515Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
    Atlassian · Confluence Data Center and ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+3 more
    99.2%Top 0.07%
    79.8priority
  8. CVE-2019-11580Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
    Atlassian · Crowd and Crowd Data CenterKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting Interpreter
    95.4%Top 0.13%
    79.8priority
  9. CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
    Atlassian · Multiple ProductsKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    99.5%Top 0.06%
    78.2priority
  10. CVE-2021-26085Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
    Atlassian · Confluence ServerKEVRansomwarePublic exploitMedium · 5.3T1190Exploit Public-Facing ApplicationT1005Data from Local System
    99.9%Top 0.03%
    76.7priority
  11. CVE-2019-11581Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
    Atlassian · Jira Server and Data CenterKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    84.6%Top 0.3%
    73.7priority
  12. CVE-2022-36804Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
    Atlassian · Bitbucket Server and Data CenterKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    99.1%Top 0.07%
    69.1priority
  13. CVE-2019-3398Atlassian Confluence Server and Data Center Path Traversal Vulnerability
    Atlassian · Confluence Server and Data CenterKEVPublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1202Indirect Command Execution
    97.0%Top 0.11%
    69.1priority
  14. CVE-2022-0540A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a…
    Atlassian · Jira Core ServerPublic exploitCritical · 9.8
    88.1%Top 0.24%
    67.5priority
  15. CVE-2021-26086Atlassian Jira Server and Data Center Path Traversal Vulnerability
    Atlassian · Jira Server and Data CenterKEVPublic exploitMedium · 5.3T1190Exploit Public-Facing ApplicationT1005Data from Local System
    >99.9%Top 0.01%
    66.7priority
  16. CVE-2024-21683This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center…
    Atlassian · Confluence Data CenterPublic exploitHigh · 7.2
    88.3%Top 0.23%
    65.0priority
  17. CVE-2021-26072The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote…
    Atlassian · Confluence ServerPublic exploit
    41.2%Top 1.3%
    64.7priority
  18. CVE-2017-9506The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0…
    Atlassian · Atlassian OAuth PluginPublic exploit
    71.6%Top 0.58%
    60.6priority
  19. CVE-2019-8451The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the…
    Atlassian · JiraPublic exploit
    94.5%Top 0.15%
    60.0priority
  20. CVE-2019-8442The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version…
    Atlassian · JiraPublic exploit
    59.8%Top 0.87%
    59.8priority
  21. CVE-2019-8446The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames…
    Atlassian · JiraPublic exploit
    17.5%Top 2.9%
    59.4priority
  22. CVE-2022-26133SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and…
    Atlassian · Bitbucket Data CenterPublic exploitCritical · 9.8
    70.6%Top 0.61%
    33.1priority
  23. CVE-2022-43781There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center
    Atlassian · Bitbucket Data CenterPublic exploitCritical · 9.8
    98.0%Top 0.09%
    32.5priority
  24. CVE-2022-26135A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user…
    Atlassian · Jira Core ServerPublic exploitMedium · 6.5
    71.6%Top 0.58%
    30.1priority
  25. CVE-2020-36289Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an…
    Atlassian · Jira ServerPublic exploitMedium · 5.3
    99.2%Top 0.07%
    29.4priority
  26. CVE-2020-14181Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an…
    Atlassian · Jira ServerPublic exploit
    99.6%Top 0.05%
    25.7priority
  27. CVE-2020-14179Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom…
    Atlassian · Jira ServerPublic exploit
    76.0%Top 0.47%
    24.9priority
  28. CVE-2019-8449The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate…
    Atlassian · JiraPublic exploit
    84.8%Top 0.29%
    24.9priority
  29. CVE-2022-36801Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML…
    Atlassian · Jira ServerMedium · 6.1
    67.1%Top 0.7%
    24.1priority
  30. CVE-2021-43942Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or…
    Atlassian · Jira Server
    55.4%Top 0.97%
    19.8priority
↑ ↓ chooseEnter openEsc close