Atlassian
Security Risk Profile
48
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 722 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 10, 2002 to present
722
Total CVEs
185
Critical+High
20
Exploited
131
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
131
Critical/High
Risk Level
48/100
medium
⚠️ 20 Active Exploits⚡ 18 Zero-Days🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
69High
116Medium
300Low
3Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
XSS
114
2
CSRF
38
3
Code Injection
23
4
Path Traversal
23
5
SSRF
19
Most Affected Products
1. Atlassian Jira510
2. Atlassian Bamboo385
3. Atlassian Jira Server288
4. Atlassian Confluence Server205
5. Atlassian Jira Service Management171
Recent Vulnerabilities
See more →CVE-2026-21571
CVSS 9.4critical
4/21/2026🔧 No Patch
CVE-2026-21570
CVSS 8.6high
3/17/2026🔧 No Patch
CVE-2026-27826
CVSS 8.2high
MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers
3/10/2026
CVE-2026-21569
CVSS 7.9EPSS 0%high
1/28/2026🔧 No Patch
CVE-2025-57681
CVSS 5.4medium
1/21/2026🔧 No Patch
CVE-2025-67824
CVSS 6.1medium
1/20/2026🔧 No Patch
EOL-jira-software-11.3
unknown
12/3/2025
EOL-confluence-10.2
unknown
12/2/2025
EOL-jira-software-11.2
unknown
11/6/2025
CVE-2025-22173
CVSS 5.3medium
10/22/2025🔧 No Patch
Monitor Atlassian in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.