https://patchfirst.co/vendor/atlassian/New and newly exploited Atlassian CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-21589/CVE-2026-21589#kevThu, 15 Oct 2026 00:00:00 GMTAtlassian · Multiple Products. In CISA KEV since 2026-10-15. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 78.2 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2021-26086/CVE-2021-26086#kevTue, 12 Nov 2024 00:00:00 GMTAtlassian · Jira Server and Data Center. In CISA KEV since 2024-11-12. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 66.7 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2024-21683/CVE-2024-21683Tue, 21 May 2024 00:00:00 GMTAtlassian · Confluence Data Center. Not in CISA KEV. EPSS 88.3% (higher than 99.77% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. Priority 65.0 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-22527/CVE-2023-22527#kevWed, 24 Jan 2024 00:00:00 GMTAtlassian · Confluence Data Center and Server. In CISA KEV since 2024-01-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1496 Resource Hijacking. Priority 79.9 of 100.kevransomwarepublic-exploitT1496https://patchfirst.co/cve/CVE-2023-22518/CVE-2023-22518#kevTue, 07 Nov 2023 00:00:00 GMTAtlassian · Confluence Data Center and Server. In CISA KEV since 2023-11-07, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1033 System Owner/User Discovery; T1105 Ingress Tool Transfer. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1033T1105https://patchfirst.co/cve/CVE-2023-22515/CVE-2023-22515#kevThu, 05 Oct 2023 00:00:00 GMTAtlassian · Confluence Data Center and Server. In CISA KEV since 2023-10-05, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.2% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1136 Create Account; T1059 Command and Scripting Interpreter; T1078 Valid Accounts. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1059.007T1136T1059T1078https://patchfirst.co/cve/CVE-2022-43781/CVE-2022-43781Thu, 17 Nov 2022 00:00:00 GMTAtlassian · Bitbucket Data Center. Not in CISA KEV. EPSS 98.0% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 32.5 of 100.public-exploithttps://patchfirst.co/cve/CVE-2022-36804/CVE-2022-36804#kevFri, 30 Sep 2022 00:00:00 GMTAtlassian · Bitbucket Server and Data Center. In CISA KEV since 2022-09-30. ENISA EUVD lists it as exploited. EPSS 99.1% (higher than 99.93% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2022-36801/CVE-2022-36801Wed, 10 Aug 2022 00:00:00 GMTAtlassian · Jira Server. Not in CISA KEV. EPSS 67.1% (higher than 99.3% of CVEs). CVSS 6.1 MEDIUM. Priority 24.1 of 100.https://patchfirst.co/cve/CVE-2022-26138/CVE-2022-26138#kevFri, 29 Jul 2022 00:00:00 GMTAtlassian · Confluence. In CISA KEV since 2022-07-29. ENISA EUVD lists it as exploited. EPSS 98.2% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1552.001 Credentials In Files. Named in 1 threat report. Priority 83.7 of 100.kevpublic-exploitT1552.001https://patchfirst.co/cve/CVE-2022-26135/CVE-2022-26135Thu, 30 Jun 2022 00:00:00 GMTAtlassian · Jira Core Server. Not in CISA KEV. EPSS 71.6% (higher than 99.42% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. Priority 30.1 of 100.public-exploithttps://patchfirst.co/cve/CVE-2022-26134/CVE-2022-26134Fri, 03 Jun 2022 00:00:00 GMTAtlassian · Confluence Server/Data Center. In CISA KEV since 2022-06-02, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Named in 2 threat reports. Priority 86.0 of 100.kevransomwarepublic-exploitT1190https://patchfirst.co/cve/CVE-2022-0540/CVE-2022-0540Wed, 20 Apr 2022 00:00:00 GMTAtlassian · Jira Core Server. Not in CISA KEV. EPSS 88.1% (higher than 99.76% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 67.5 of 100.public-exploithttps://patchfirst.co/cve/CVE-2022-26133/CVE-2022-26133Wed, 20 Apr 2022 00:00:00 GMTAtlassian · Bitbucket Data Center. Not in CISA KEV. EPSS 70.6% (higher than 99.39% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 33.1 of 100.public-exploithttps://patchfirst.co/cve/CVE-2021-26085/CVE-2021-26085#kevMon, 28 Mar 2022 00:00:00 GMTAtlassian · Confluence Server. In CISA KEV since 2022-03-28, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 76.7 of 100.kevransomwarepublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2019-11581/CVE-2019-11581#kevMon, 07 Mar 2022 00:00:00 GMTAtlassian · Jira Server and Data Center. In CISA KEV since 2022-03-07. ENISA EUVD lists it as exploited. EPSS 84.6% (higher than 99.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2021-43942/CVE-2021-43942Tue, 04 Jan 2022 00:00:00 GMTAtlassian · Jira Server. Not in CISA KEV. EPSS 55.4% (higher than 99.03% of CVEs). Priority 19.8 of 100.https://patchfirst.co/cve/CVE-2021-26084/CVE-2021-26084#kevWed, 03 Nov 2021 00:00:00 GMTAtlassian · Confluence Server and Data Center. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1496 Resource Hijacking. Named in 3 threat reports. Priority 87.6 of 100.kevransomwarepublic-exploitT1059T1496https://patchfirst.co/cve/CVE-2019-3396/CVE-2019-3396#kevWed, 03 Nov 2021 00:00:00 GMTAtlassian · Confluence Server and Data Server. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1090 Proxy; T1202 Indirect Command Execution. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1133T1090T1202https://patchfirst.co/cve/CVE-2019-11580/CVE-2019-11580#kevWed, 03 Nov 2021 00:00:00 GMTAtlassian · Crowd and Crowd Data Center. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 95.4% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevransomwarepublic-exploitT1059https://patchfirst.co/cve/CVE-2019-3398/CVE-2019-3398#kevWed, 03 Nov 2021 00:00:00 GMTAtlassian · Confluence Server and Data Center. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 97.0% (higher than 99.89% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1202 Indirect Command Execution; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.kevpublic-exploitT1202T1059https://patchfirst.co/cve/CVE-2020-36289/CVE-2020-36289Wed, 12 May 2021 00:00:00 GMTAtlassian · Jira Server. Not in CISA KEV. EPSS 99.2% (higher than 99.93% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. Priority 29.4 of 100.public-exploithttps://patchfirst.co/cve/CVE-2021-26072/CVE-2021-26072Thu, 01 Apr 2021 00:00:00 GMTAtlassian · Confluence Server. Not in CISA KEV. EPSS 41.2% (higher than 98.7% of CVEs). Public exploit code exists. Priority 64.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2020-14179/CVE-2020-14179Mon, 21 Sep 2020 00:00:00 GMTAtlassian · Jira Server. Not in CISA KEV. EPSS 76.0% (higher than 99.53% of CVEs). Public exploit code exists. Priority 24.9 of 100.public-exploithttps://patchfirst.co/cve/CVE-2020-14181/CVE-2020-14181Thu, 17 Sep 2020 00:00:00 GMTAtlassian · Jira Server. Not in CISA KEV. EPSS 99.6% (higher than 99.95% of CVEs). Public exploit code exists. Priority 25.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2019-8451/CVE-2019-8451Wed, 11 Sep 2019 00:00:00 GMTAtlassian · Jira. Not in CISA KEV. EPSS 94.5% (higher than 99.85% of CVEs). Public exploit code exists. Priority 60.0 of 100.public-exploithttps://patchfirst.co/cve/CVE-2019-8449/CVE-2019-8449Wed, 11 Sep 2019 00:00:00 GMTAtlassian · Jira. Not in CISA KEV. EPSS 84.8% (higher than 99.71% of CVEs). Public exploit code exists. Priority 24.9 of 100.public-exploithttps://patchfirst.co/cve/CVE-2019-8446/CVE-2019-8446Fri, 23 Aug 2019 00:00:00 GMTAtlassian · Jira. Not in CISA KEV. EPSS 17.5% (higher than 97.1% of CVEs). Public exploit code exists. Priority 59.4 of 100.public-exploithttps://patchfirst.co/cve/CVE-2019-8442/CVE-2019-8442Wed, 22 May 2019 00:00:00 GMTAtlassian · Jira. Not in CISA KEV. EPSS 59.8% (higher than 99.13% of CVEs). Public exploit code exists. Priority 59.8 of 100.public-exploithttps://patchfirst.co/cve/CVE-2017-9506/CVE-2017-9506Wed, 23 Aug 2017 00:00:00 GMTAtlassian · Atlassian OAuth Plugin. Not in CISA KEV. EPSS 71.6% (higher than 99.42% of CVEs). Public exploit code exists. Priority 60.6 of 100.public-exploit