Security Advisories & Bulletins
Security advisories for Atlassian Server and Data Center products are released on Tuesdays. Security Bulletins are released on the third Tuesday of every month. To search previous disclosures, see our Vulnerability Disclosure Portal. For information on Atlassian cloud security, see our Security page.
DECEMBEr
December 2023 Security Bulletin
SnakeYAML library RCE Vulnerability impacts Multiple Products (CVE-2022-1471)
RCE Vulnerability in Confluence Data Center and Server (CVE-2023-22522)
RCE Vulnerability in Atlassian Companion App for MacOS (CVE-2023-22524)
November
Apache ActiveMQ RCE Vulnerability impacts Bamboo Data Center and Server
OCTOBER
Confluence Data Center and Server Advisory (CVE-2023-22518)
October 2023 Security Bulletin
October 2023 Security Advisories Overview
Jira Service Management Data Center and Server Advisory (CVE-2019-13990)
September
November
November 2022 Security Advisories Overview
Crowd Security Advisory (CVE-2022-43782)
Bitbucket Server and Data Center Security Advisory (CVE-2022-43781)
August
August 2022 Security Advisories Overview
Bitbucket Server and Data Center Advisory (CVE-2022-36804)
July
July 2022 Security Advisories Overview
Multiple Products Security Advisory (CVE-2022-26136, CVE-2022-26137)
Security Bug Fix Policy
Our priority is to ensure your systems cannot be compromised by exploiting vulnerabilities in our products.
Security Advisory Publishing Policy
We notify customers whenever a critical security vulnerability is discovered and resolved.