Paradrawthe legal stack, drawnSecurity Advisories | Atlassian
804 words, 188 clausesno date on the pageread 11/10/2026source
·Monitor the performance and security of your Jira and Confluence Data Center instances all in one place. Learn more about Instance Health in Portfolio Insights Trust Center Security @ Atlassian Security Advisories
·Security Advisories & Bulletins
·Security advisories for Atlassian Data Center products are released on Tuesdays. Security Bulletins are released on the third Tuesday of every month. To search previous disclosures, see our Vulnerability Disclosure Portal. For information on Atlassian cloud security, see our Security page.
·2026
·OCTOBER
·Arbitrary File Access Vulnerability impacts Multiple Products (CVE-2026-21589)
·SEPTEMBER September 2026 Security Bulletin
·AUGUST August 2026 Security Bulletin
·JULY July 2026 Security Bulletin
·JUNE
·MAY
·APRIL
·MARCH
·February
·February 2026 Security Bulletin
·jANUARY
·January 2026 Security Bulletin JULY July 2026 Security Bulletin
·2025
·DECEMBER
·December 2025 Security Bulletin
·NOVEMBER
·November 2025 Security Bulletin
·OCTOBER
·October 2025 Security Bulletin
·September
·September 2025 Security Bulletin
·AUGUST
·August 2025 Security Bulletin
·July
·June
·MAY
·April
·March
·FEBRUARY
·February 2025 Security Bulletin
·JANUARY
·January 2025 Security Bulletin
·DECEMBER
·December 2025 Security Bulletin
·2024
·December
·December 2024 Security Bulletin
·November
·November 2024 Security Bulletin
·OCTOBER
·October 2024 Security Bulletin
·SEPTEMBER
·September 2024 Security Bulletin
·AUGUST
·August 2024 Security Bulletin
·JuLY
·June
·MAY
·April
·March
·february
·February 2024 Security Bulletin
·January
·January 2024 Security Bulletin
·RCE Vulnerability in Out-of-Date Versions of Confluence Data Center and Server (CVE-2023-22527)
·2023
·DECEMBEr
·December 2023 Security Bulletin
·SnakeYAML library RCE Vulnerability impacts Multiple Products (CVE-2022-1471)
·RCE Vulnerability in Confluence Data Center and Server (CVE-2023-22522)
·RCE Vulnerability in Atlassian Companion App for MacOS (CVE-2023-22524)
·RCE Vulnerability in Assets Discovery (CVE-2023-22523)
·December 2023 Security Advisories Overview
·November
·Apache ActiveMQ RCE Vulnerability impacts Bamboo Data Center and Server
·November 2023 Security Advisories Overview November 2023 Security Bulletin
·OCTOBER
·Confluence Data Center and Server Advisory (CVE-2023-22518) October 2023 Security Bulletin
·October 2023 Security Advisories Overview
·Jira Service Management Data Center and Server Advisory (CVE-2019-13990)
·Confluence Data Center and Server Advisory (CVE-2023-22515)
·September
·September 2023 Security Bulletin
·August
·August 2023 Security Bulletin
·JUlY
·FeBRUARY
·Multiple Products Security Advisory (CVE-2022-41903, CVE-2022-23521)
·JANUARY
·January 2023 Security Advisories Overview
·Jira Service Management Server and Data Center Advisory (CVE-2023-22501)
·2022
·November
·November 2022 Security Advisories Overview
·Crowd Security Advisory (CVE-2022-43782)
·Bitbucket Server and Data Center Security Advisory (CVE-2022-43781)
·August
·August 2022 Security Advisories Overview
·Bitbucket Server and Data Center Advisory (CVE-2022-36804)
·July
·July 2022 Security Advisories Overview
·Multiple Products Security Advisory (CVE-2022-26136, CVE-2022-26137)
·Questions for Confluence app for Confluence Server and Data Center Security Advisory (CVE-2022-26138)
·June
·Confluence Server and Data Center Security Advisory (CVE-2022-26134)
·Jira and Jira Service Management Security Advisory (CVE-2022-26135)
·April
·Jira and Jira Service Management Security Advisory (CVE-2022-0540)
·March
·Multiple Products Security Advisory (CVE-2016-10750, CVE-2022-26133)
·2021
·December
·Multiple Products Security Advisory (CVE-2021-44228)
·November
·Multiple Products Security Advisory (CVE-2021-42574)
·October
·Jira Service Management Data Center, Jira Service Management Server, and Insight - Asset Management (CVE-2018-10054)
·August
·Confluence Server and Data Center (CVE-2021-26084)
·July
·Jira Data Center, Jira Core Data Center, and Jira Service Management Data Center (CVE-2020-36239)
·April
·Bamboo for Windows (CVE-2020-27955, CVE-2021-21237)
·March
·Sourcetree for Windows (CVE-2020-27955, CVE-2021-21237)
·February
·Jira Server and Data Center for Slack (CVE-2021-26068)
·2020
·September
·January
·Bitbucket Server and Bitbucket Data Center (CVE-2019-15010, CVE-2019-15012, CVE-2019-20097))
·2019
·December
·Confluence Server and Data Center Security Advisory (CVE-2019-15006)
·November
·Jira Service Desk Server and Jira Service Desk Data Center (CVE-2019-15003, CVE-2019-15004)
·September
·Jira Server and Jira Data Center (CVE-2019-15001)
·Bitbucket Server and Bitbucket Data Center (CVE-2019-15000)
·Jira Service Desk Server and Jira Service Desk Data Center (CVE-2019-14994)
·August
·Confluence Server and Confluence Data Center (CVE-2019-3394)
·July
·Jira Server and Data Center (CVE-2019-11581)
·June
·May
·Crowd Server and Crowd Data Center (CVE-2019-11580) Bitbucket Data Center (CVE-2019-3397)
·April
·Confluence Server and Confluence Data Center (CVE-2019-3398)
·March
·Sourcetree for macOS and Windows (CVE-2018-17456, CVE-2018-20234, CVE-2018-20235, CVE-2018-20236)
·Confluence Server and Confluence Data Center (CVE-2019-3395, CVE-2019-3396)
·2018
·October
·Sourcetree for macOS and Windows (CVE-2018-13396, CVE-2018-13397)
·July
·Sourcetree for macOS and Windows (CVE-2018-11235, CVE-2018-13385, CVE-2018-13386)
·April
·Sourcetree for Windows (CVE-2018-5226)
·March
·Bitbucket Server and Data Center (CVE-2018-5225) Fisheye and Crucible (CVE-2018-5223) Bamboo (CVE-2018-5224)
·January
·Sourcetree (CVE-2017-14592, CVE-2017-14593, CVE-2017-17458, CVE-2017-17831) Fisheye and Crucible (CVE-2017-16861)
·2017
·December
·November
·Hipchat Server, Data Center, and Mac desktop client (CVE-2017-14585, CVE-2017-14586) Fisheye and Crucible (CVE-2017-14591)
·October
·Previous advisories
·Jira Confluence Hipchat Bamboo Bitbucket Sourcetree Fisheye Crucible
·Security Bug Fix Policy
·Our priority is to ensure your systems cannot be compromised by exploiting vulnerabilities in our products.
·Security Advisory Publishing Policy
·We notify customers whenever a critical security vulnerability is discovered and resolved.