A
Atlassian
Security Risk Profile
50
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 735 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 10, 2002 to present
735
Total CVEs
197
Critical+High
20
Exploited
154
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
154
Critical/High
Risk Level
50/100
medium
⚠️ 20 Active Exploits⚡ 18 Zero-Days🆕 5Fresh (<7d)📈 8 in Last 30 Days
Severity Distribution
Critical
68High
129Medium
301Low
3Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
XSS
115
2
CSRF
38
3
Path Traversal
27
4
Code Injection
24
5
SSRF
21
Most Affected Products
1. Atlassian Jira510
2. Atlassian Bamboo393
3. Atlassian Jira Server288
4. Atlassian Confluence Server205
5. Atlassian Confluence Data Center189
Recent Vulnerabilities
See more →CVE-2026-77246
CVSS 8.6high
MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path
Sep 22, 2026
CVE-2026-77248
CVSS 8.6high
MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport
Sep 22, 2026
CVE-2026-77255
CVSS 8.6high
MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue
Sep 22, 2026
CVE-2026-77270
CVSS 6.5medium
MCP Atlassian: Arbitrary File Read via Upload Attachment Tools
Sep 22, 2026
CVE-2026-21586
CVSS 7.1high
Sep 15, 2026🔧 No Patch
CVE-2026-21587
CVSS 7.1high
Sep 15, 2026🔧 No Patch
CVE-2026-21588
CVSS 7.1high
Sep 15, 2026🔧 No Patch
CVE-2026-21580
CVSS 9.3critical
Aug 18, 2026🔧 No Patch
CVE-2026-21582
CVSS 8.8high
Aug 18, 2026🔧 No Patch
CVE-2026-21584
CVSS 7.6high
Aug 18, 2026🔧 No Patch
Monitor Atlassian in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.