{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Atlassian vulnerabilities","home_page_url":"https://patchfirst.co/vendor/atlassian/","feed_url":"https://patchfirst.co/feed/vendor/atlassian.json","description":"New and newly exploited Atlassian CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-21589#kev","url":"https://patchfirst.co/cve/CVE-2026-21589/","title":"[KEV] CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","content_text":"Atlassian · Multiple Products. In CISA KEV since 2026-10-15. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 78.2 of 100.","summary":"Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","date_published":"2026-10-15T00:00:00.000Z","date_modified":"2026-10-29T13:17:09.000Z","tags":["kev","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":78.2,"kev":{"dateAdded":"2026-10-15","ransomware":false},"epss":{"score":0.99477,"percentile":0.99943},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Atlassian","product":"Multiple Products","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-26086#kev","url":"https://patchfirst.co/cve/CVE-2021-26086/","title":"[KEV] CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability","content_text":"Atlassian · Jira Server and Data Center. In CISA KEV since 2024-11-12. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 66.7 of 100.","summary":"Atlassian Jira Server and Data Center Path Traversal Vulnerability","date_published":"2024-11-12T00:00:00.000Z","date_modified":"2026-06-17T03:42:50.000Z","tags":["kev","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":66.7,"kev":{"dateAdded":"2024-11-12","ransomware":false},"epss":{"score":0.99999,"percentile":0.99993},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Atlassian","product":"Jira Server and Data Center","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-21683","url":"https://patchfirst.co/cve/CVE-2024-21683/","title":"CVE-2024-21683: This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center…","content_text":"Atlassian · Confluence Data Center. Not in CISA KEV. EPSS 88.3% (higher than 99.77% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. Priority 65.0 of 100.","summary":"This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center…","date_published":"2024-05-21T00:00:00.000Z","date_modified":"2025-05-12T15:22:41.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65,"kev":null,"epss":{"score":0.88267,"percentile":0.99768},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"Atlassian","product":"Confluence Data Center","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-22527#kev","url":"https://patchfirst.co/cve/CVE-2023-22527/","title":"[KEV] CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability","content_text":"Atlassian · Confluence Data Center and Server. In CISA KEV since 2024-01-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1496 Resource Hijacking. Priority 79.9 of 100.","summary":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","date_published":"2024-01-24T00:00:00.000Z","date_modified":"2026-06-17T05:35:38.000Z","tags":["kev","ransomware","public-exploit","T1496"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2024-01-24","ransomware":true},"epss":{"score":0.99984,"percentile":0.99982},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Confluence Data Center and Server","techniqueIds":["T1496"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-22518#kev","url":"https://patchfirst.co/cve/CVE-2023-22518/","title":"[KEV] CVE-2023-22518: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","content_text":"Atlassian · Confluence Data Center and Server. In CISA KEV since 2023-11-07, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1033 System Owner/User Discovery; T1105 Ingress Tool Transfer. Priority 79.9 of 100.","summary":"Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","date_published":"2023-11-07T00:00:00.000Z","date_modified":"2026-06-17T05:35:37.000Z","tags":["kev","ransomware","public-exploit","T1190","T1033","T1105"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2023-11-07","ransomware":true},"epss":{"score":0.99999,"percentile":0.99996},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Confluence Data Center and Server","techniqueIds":["T1190","T1033","T1105"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-22515#kev","url":"https://patchfirst.co/cve/CVE-2023-22515/","title":"[KEV] CVE-2023-22515: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","content_text":"Atlassian · Confluence Data Center and Server. In CISA KEV since 2023-10-05, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.2% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1136 Create Account; T1059 Command and Scripting Interpreter; T1078 Valid Accounts. Priority 79.8 of 100.","summary":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","date_published":"2023-10-05T00:00:00.000Z","date_modified":"2026-06-17T05:35:37.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059.007","T1136","T1059","T1078"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2023-10-05","ransomware":true},"epss":{"score":0.99223,"percentile":0.99935},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Confluence Data Center and Server","techniqueIds":["T1190","T1059.007","T1136","T1059","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-43781","url":"https://patchfirst.co/cve/CVE-2022-43781/","title":"CVE-2022-43781: There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center","content_text":"Atlassian · Bitbucket Data Center. Not in CISA KEV. EPSS 98.0% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 32.5 of 100.","summary":"There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center","date_published":"2022-11-17T00:00:00.000Z","date_modified":"2024-10-02T14:56:09.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":32.5,"kev":null,"epss":{"score":0.98035,"percentile":0.9991},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Bitbucket Data Center","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-36804#kev","url":"https://patchfirst.co/cve/CVE-2022-36804/","title":"[KEV] CVE-2022-36804: Atlassian Bitbucket Server and Data Center Command Injection Vulnerability","content_text":"Atlassian · Bitbucket Server and Data Center. In CISA KEV since 2022-09-30. ENISA EUVD lists it as exploited. EPSS 99.1% (higher than 99.93% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.","summary":"Atlassian Bitbucket Server and Data Center Command Injection Vulnerability","date_published":"2022-09-30T00:00:00.000Z","date_modified":"2026-06-17T04:54:00.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2022-09-30","ransomware":false},"epss":{"score":0.99077,"percentile":0.99933},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Atlassian","product":"Bitbucket Server and Data Center","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-36801","url":"https://patchfirst.co/cve/CVE-2022-36801/","title":"CVE-2022-36801: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML…","content_text":"Atlassian · Jira Server. Not in CISA KEV. EPSS 67.1% (higher than 99.3% of CVEs). CVSS 6.1 MEDIUM. Priority 24.1 of 100.","summary":"Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML…","date_published":"2022-08-10T00:00:00.000Z","date_modified":"2024-10-29T15:15:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":24.1,"kev":null,"epss":{"score":0.67091,"percentile":0.99298},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Atlassian","product":"Jira Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-26138#kev","url":"https://patchfirst.co/cve/CVE-2022-26138/","title":"[KEV] CVE-2022-26138: Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","content_text":"Atlassian · Confluence. In CISA KEV since 2022-07-29. ENISA EUVD lists it as exploited. EPSS 98.2% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1552.001 Credentials In Files. Named in 1 threat report. Priority 83.7 of 100.","summary":"Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","date_published":"2022-07-29T00:00:00.000Z","date_modified":"2026-06-17T04:34:46.000Z","tags":["kev","public-exploit","T1552.001"],"_patchfirst":{"reason":"kev","priority":83.7,"kev":{"dateAdded":"2022-07-29","ransomware":false},"epss":{"score":0.98241,"percentile":0.99916},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Confluence","techniqueIds":["T1552.001"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-26135","url":"https://patchfirst.co/cve/CVE-2022-26135/","title":"CVE-2022-26135: A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user…","content_text":"Atlassian · Jira Core Server. Not in CISA KEV. EPSS 71.6% (higher than 99.42% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. Priority 30.1 of 100.","summary":"A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user…","date_published":"2022-06-30T00:00:00.000Z","date_modified":"2024-10-29T15:20:52.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":30.1,"kev":null,"epss":{"score":0.71616,"percentile":0.99419},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Atlassian","product":"Jira Core Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-26134","url":"https://patchfirst.co/cve/CVE-2022-26134/","title":"CVE-2022-26134: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","content_text":"Atlassian · Confluence Server/Data Center. In CISA KEV since 2022-06-02, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Named in 2 threat reports. Priority 86.0 of 100.","summary":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","date_published":"2022-06-03T00:00:00.000Z","date_modified":"2026-06-17T04:34:44.000Z","tags":["kev","ransomware","public-exploit","T1190"],"_patchfirst":{"reason":"published","priority":86,"kev":{"dateAdded":"2022-06-02","ransomware":true},"epss":{"score":0.99999,"percentile":0.99993},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Confluence Server/Data Center","techniqueIds":["T1190"],"reportCount":2,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-0540","url":"https://patchfirst.co/cve/CVE-2022-0540/","title":"CVE-2022-0540: A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a…","content_text":"Atlassian · Jira Core Server. Not in CISA KEV. EPSS 88.1% (higher than 99.76% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 67.5 of 100.","summary":"A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a…","date_published":"2022-04-20T00:00:00.000Z","date_modified":"2024-10-24T16:54:19.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":67.5,"kev":null,"epss":{"score":0.88057,"percentile":0.99764},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Jira Core Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-26133","url":"https://patchfirst.co/cve/CVE-2022-26133/","title":"CVE-2022-26133: SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and…","content_text":"Atlassian · Bitbucket Data Center. Not in CISA KEV. EPSS 70.6% (higher than 99.39% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 33.1 of 100.","summary":"SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and…","date_published":"2022-04-20T00:00:00.000Z","date_modified":"2024-10-03T14:55:36.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":33.1,"kev":null,"epss":{"score":0.70591,"percentile":0.9939},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Bitbucket Data Center","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2021-26085#kev","url":"https://patchfirst.co/cve/CVE-2021-26085/","title":"[KEV] CVE-2021-26085: Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","content_text":"Atlassian · Confluence Server. In CISA KEV since 2022-03-28, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 76.7 of 100.","summary":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","date_published":"2022-03-28T00:00:00.000Z","date_modified":"2026-06-17T03:42:49.000Z","tags":["kev","ransomware","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":76.7,"kev":{"dateAdded":"2022-03-28","ransomware":true},"epss":{"score":0.99937,"percentile":0.99971},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Atlassian","product":"Confluence Server","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-11581#kev","url":"https://patchfirst.co/cve/CVE-2019-11581/","title":"[KEV] CVE-2019-11581: Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability","content_text":"Atlassian · Jira Server and Data Center. In CISA KEV since 2022-03-07. ENISA EUVD lists it as exploited. EPSS 84.6% (higher than 99.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.7 of 100.","summary":"Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability","date_published":"2022-03-07T00:00:00.000Z","date_modified":"2026-06-17T02:13:12.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":73.7,"kev":{"dateAdded":"2022-03-07","ransomware":false},"epss":{"score":0.84621,"percentile":0.99704},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Jira Server and Data Center","techniqueIds":["T1190","T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-43942","url":"https://patchfirst.co/cve/CVE-2021-43942/","title":"CVE-2021-43942: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or…","content_text":"Atlassian · Jira Server. Not in CISA KEV. EPSS 55.4% (higher than 99.03% of CVEs). Priority 19.8 of 100.","summary":"Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or…","date_published":"2022-01-04T00:00:00.000Z","date_modified":"2024-10-08T14:23:31.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.8,"kev":null,"epss":{"score":0.55364,"percentile":0.99031},"cvss":null,"vendor":"Atlassian","product":"Jira Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2021-26084#kev","url":"https://patchfirst.co/cve/CVE-2021-26084/","title":"[KEV] CVE-2021-26084: Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","content_text":"Atlassian · Confluence Server and Data Center. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1496 Resource Hijacking. Named in 3 threat reports. Priority 87.6 of 100.","summary":"Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:42:49.000Z","tags":["kev","ransomware","public-exploit","T1059","T1496"],"_patchfirst":{"reason":"kev","priority":87.6,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.99999,"percentile":0.99993},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Confluence Server and Data Center","techniqueIds":["T1059","T1496"],"reportCount":3,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-3396#kev","url":"https://patchfirst.co/cve/CVE-2019-3396/","title":"[KEV] CVE-2019-3396: Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","content_text":"Atlassian · Confluence Server and Data Server. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1090 Proxy; T1202 Indirect Command Execution. Named in 1 threat report. Priority 83.7 of 100.","summary":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T02:35:05.000Z","tags":["kev","ransomware","public-exploit","T1133","T1090","T1202"],"_patchfirst":{"reason":"kev","priority":83.7,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.99913,"percentile":0.99967},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Confluence Server and Data Server","techniqueIds":["T1133","T1090","T1202"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-11580#kev","url":"https://patchfirst.co/cve/CVE-2019-11580/","title":"[KEV] CVE-2019-11580: Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability","content_text":"Atlassian · Crowd and Crowd Data Center. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 95.4% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter. Priority 79.8 of 100.","summary":"Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T02:13:11.000Z","tags":["kev","ransomware","public-exploit","T1059"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.95355,"percentile":0.99867},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Atlassian","product":"Crowd and Crowd Data Center","techniqueIds":["T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-3398#kev","url":"https://patchfirst.co/cve/CVE-2019-3398/","title":"[KEV] CVE-2019-3398: Atlassian Confluence Server and Data Center Path Traversal Vulnerability","content_text":"Atlassian · Confluence Server and Data Center. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 97.0% (higher than 99.89% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1202 Indirect Command Execution; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.","summary":"Atlassian Confluence Server and Data Center Path Traversal Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T02:35:05.000Z","tags":["kev","public-exploit","T1202","T1059"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.97028,"percentile":0.9989},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Atlassian","product":"Confluence Server and Data Center","techniqueIds":["T1202","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-36289","url":"https://patchfirst.co/cve/CVE-2020-36289/","title":"CVE-2020-36289: Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an…","content_text":"Atlassian · Jira Server. Not in CISA KEV. EPSS 99.2% (higher than 99.93% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. Priority 29.4 of 100.","summary":"Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an…","date_published":"2021-05-12T00:00:00.000Z","date_modified":"2024-10-17T14:27:07.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":29.4,"kev":null,"epss":{"score":0.99209,"percentile":0.99934},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Atlassian","product":"Jira Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2021-26072","url":"https://patchfirst.co/cve/CVE-2021-26072/","title":"CVE-2021-26072: The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote…","content_text":"Atlassian · Confluence Server. Not in CISA KEV. EPSS 41.2% (higher than 98.7% of CVEs). Public exploit code exists. Priority 64.7 of 100.","summary":"The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote…","date_published":"2021-04-01T00:00:00.000Z","date_modified":"2024-09-17T01:40:50.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.7,"kev":null,"epss":{"score":0.41219,"percentile":0.98665},"cvss":null,"vendor":"Atlassian","product":"Confluence Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-14179","url":"https://patchfirst.co/cve/CVE-2020-14179/","title":"CVE-2020-14179: Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom…","content_text":"Atlassian · Jira Server. Not in CISA KEV. EPSS 76.0% (higher than 99.53% of CVEs). Public exploit code exists. Priority 24.9 of 100.","summary":"Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom…","date_published":"2020-09-21T00:00:00.000Z","date_modified":"2024-09-16T16:17:53.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.9,"kev":null,"epss":{"score":0.76042,"percentile":0.9953},"cvss":null,"vendor":"Atlassian","product":"Jira Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-14181","url":"https://patchfirst.co/cve/CVE-2020-14181/","title":"CVE-2020-14181: Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an…","content_text":"Atlassian · Jira Server. Not in CISA KEV. EPSS 99.6% (higher than 99.95% of CVEs). Public exploit code exists. Priority 25.7 of 100.","summary":"Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an…","date_published":"2020-09-17T00:00:00.000Z","date_modified":"2024-09-16T21:57:12.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":25.7,"kev":null,"epss":{"score":0.99603,"percentile":0.99948},"cvss":null,"vendor":"Atlassian","product":"Jira Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-8451","url":"https://patchfirst.co/cve/CVE-2019-8451/","title":"CVE-2019-8451: The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the…","content_text":"Atlassian · Jira. Not in CISA KEV. EPSS 94.5% (higher than 99.85% of CVEs). Public exploit code exists. Priority 60.0 of 100.","summary":"The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the…","date_published":"2019-09-11T00:00:00.000Z","date_modified":"2024-09-16T19:14:27.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":60,"kev":null,"epss":{"score":0.94453,"percentile":0.99852},"cvss":null,"vendor":"Atlassian","product":"Jira","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-8449","url":"https://patchfirst.co/cve/CVE-2019-8449/","title":"CVE-2019-8449: The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate…","content_text":"Atlassian · Jira. Not in CISA KEV. EPSS 84.8% (higher than 99.71% of CVEs). Public exploit code exists. Priority 24.9 of 100.","summary":"The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate…","date_published":"2019-09-11T00:00:00.000Z","date_modified":"2024-09-17T01:01:03.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.9,"kev":null,"epss":{"score":0.84771,"percentile":0.99707},"cvss":null,"vendor":"Atlassian","product":"Jira","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-8446","url":"https://patchfirst.co/cve/CVE-2019-8446/","title":"CVE-2019-8446: The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames…","content_text":"Atlassian · Jira. Not in CISA KEV. EPSS 17.5% (higher than 97.1% of CVEs). Public exploit code exists. Priority 59.4 of 100.","summary":"The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames…","date_published":"2019-08-23T00:00:00.000Z","date_modified":"2024-09-17T00:01:21.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":59.4,"kev":null,"epss":{"score":0.1755,"percentile":0.97134},"cvss":null,"vendor":"Atlassian","product":"Jira","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-8442","url":"https://patchfirst.co/cve/CVE-2019-8442/","title":"CVE-2019-8442: The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version…","content_text":"Atlassian · Jira. Not in CISA KEV. EPSS 59.8% (higher than 99.13% of CVEs). Public exploit code exists. Priority 59.8 of 100.","summary":"The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version…","date_published":"2019-05-22T00:00:00.000Z","date_modified":"2024-09-16T17:58:53.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":59.8,"kev":null,"epss":{"score":0.59832,"percentile":0.99129},"cvss":null,"vendor":"Atlassian","product":"Jira","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2017-9506","url":"https://patchfirst.co/cve/CVE-2017-9506/","title":"CVE-2017-9506: The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0…","content_text":"Atlassian · Atlassian OAuth Plugin. Not in CISA KEV. EPSS 71.6% (higher than 99.42% of CVEs). Public exploit code exists. Priority 60.6 of 100.","summary":"The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0…","date_published":"2017-08-23T00:00:00.000Z","date_modified":"2024-10-16T14:03:06.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":60.6,"kev":null,"epss":{"score":0.71601,"percentile":0.99418},"cvss":null,"vendor":"Atlassian","product":"Atlassian OAuth Plugin","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}