Vendor dossier / #20
Atlassian vulnerabilities in CISA KEV
Answer CISA's KEV catalog lists 13 Atlassian vulnerabilities as of catalog 2026.09.23, 0.8% of all 1,721 entries and rank 20 of 283 vendors. The first was added on 2021-11-03 and the most recent on 2024-11-12; 8 are flagged as used in ransomware campaigns.
- KEV entries
- 130.8% of catalog
- Last 90 days
- +0added
- Ransomware: known
- 861.5%
- Products
- 9distinct
- First added
- 2021-11-03
- Latest added
- 2024-11-12
- Median days to due
- 21
- Open deadlines
- 0federal
TAdditions per quarter
Table view (by year)
| Year | Added |
|---|---|
| 2021 | 4 |
| 2022 | 5 |
| 2023 | 2 |
| 2024 | 2 |
| 2025 | 0 |
| 2026 | 0 |
QCommon questions
How many Atlassian vulnerabilities are in CISA KEV?
13, as of KEV catalog 2026.09.23 (released 2026-09-23). That is 0.8% of the catalog.
Which Atlassian product has the most KEV entries?
Confluence Data Center and Server, with 3 entries. 9 products appear in total.
How many Atlassian KEV vulnerabilities are linked to ransomware?
8 of 13 (61.5%) are flagged by CISA as known to be used in ransomware campaigns.
When was the latest Atlassian vulnerability added to KEV?
2024-11-12 (CVE-2021-26086).
What is the most common weakness in Atlassian KEV entries?
CWE-22 (Path traversal), listed on 3 entries.
PProducts
| Product | Entries | Share of vendor |
|---|---|---|
| Confluence Data Center and Server | 3 | 23.1% |
| Jira Server and Data Center | 2 | 15.4% |
| Confluence Server and Data Center | 2 | 15.4% |
| Bitbucket Server and Data Center | 1 | 7.7% |
| Confluence | 1 | 7.7% |
| Confluence Server/Data Center | 1 | 7.7% |
| Confluence Server | 1 | 7.7% |
| Confluence Server and Data Server | 1 | 7.7% |
| Crowd and Crowd Data Center | 1 | 7.7% |
WWeaknesses
| CWE | Entries | Share of vendor |
|---|---|---|
| CWE-22 Path traversal | 3 | 23.1% |
| CWE-74 Injection | 2 | 15.4% |
| CWE-917 | 2 | 15.4% |
| CWE-863 Incorrect authorization | 1 | 7.7% |
| CWE-78 OS command injection | 1 | 7.7% |
| CWE-88 | 1 | 7.7% |
| CWE-158 | 1 | 7.7% |
| CWE-798 Hard-coded credentials | 1 | 7.7% |
| CWE-425 | 1 | 7.7% |
| No CWE listed | 2 | 15.4% |
EAll 13 entries
| CVE | Product | Vulnerability | Added | Due | Ransomware | CWE |
|---|---|---|---|---|---|---|
| CVE-2021-26086 | Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2023-22527 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability | Known | CWE-74 | ||
| CVE-2023-22518 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | Known | CWE-863 | ||
| CVE-2023-22515 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | Known | none listed | ||
| CVE-2022-36804 | Bitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | Unknown | CWE-78, CWE-88, CWE-158 | ||
| CVE-2022-26138 | Confluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | Unknown | CWE-798 | ||
| CVE-2022-26134 | Confluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | Known | CWE-917 | ||
| CVE-2021-26085 | Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | Known | CWE-425 | ||
| CVE-2019-11581 | Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | Unknown | CWE-74 | ||
| CVE-2021-26084 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | Known | CWE-917 | ||
| CVE-2019-3398 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2019-3396 | Confluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | Known | CWE-22 | ||
| CVE-2019-11580 | Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | Known | none listed |
Cite this
CISA's Known Exploited Vulnerabilities catalog lists 13 Atlassian vulnerabilities (0.8% of all entries). Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/vendors/atlassian/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23. Vendor names are CISA's vendorProject strings; Telemetry states no facts about Atlassian beyond this data.