What’s Vulnerable › Products

Atlassian Crowd vulnerabilities

26 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Atlassian Crowd version is affected

Exploited Atlassian Crowd vulnerabilities

• CVE-2026-21589 — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
• CVE-2019-11580 — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

Latest Atlassian Crowd vulnerabilities

• CVE-2026-21589 — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVSS 7.5) — exploited
• CVE-2026-21582 — (CVSS 8.8)
• CVE-2026-21569 — (CVSS 7.9)
• CVE-2023-22521 — (CVSS 8.8)
• CVE-2022-43782 — (CVSS 9.8)
• CVE-2022-26137 — (CVSS 8.8)
• CVE-2022-26136 — (CVSS 9.8)
• CVE-2020-36240 — (CVSS 5.3)
• CVE-2019-20902 — (CVSS 7.5)
• CVE-2019-20104 — (CVSS 7.5)
• CVE-2017-18107 — (CVSS 6.5)
• CVE-2019-15005 — (CVSS 4.3)
• CVE-2019-11580 — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability (CVSS 9.8) — exploited
• CVE-2018-20239 — (CVSS 5.4)
• CVE-2017-18110 — (CVSS 6.5)
• CVE-2017-18109 — (CVSS 6.1)
• CVE-2017-18108 — (CVSS 7.2)
• CVE-2017-18106 — (CVSS 7.5)
• CVE-2017-18105 — (CVSS 8.1)
• CVE-2018-20238 — (CVSS 8.1)
• CVE-2016-10740 — (CVSS 4.9)
• CVE-2017-16858 — (CVSS 6.8)
• CVE-2016-6496 — (CVSS 9.8)
• CVE-2013-3926 — (CVSS 7.5)
• CVE-2013-3925 — (CVSS 5.8)