This resource represents Atlassian products' CVE information. Use it to retrieve information on what particular Atlassian products are affected by various CVEs.
Get a list of Atlassian apps and products with their associated CVE data. This data includes CVEs that affect each supported product/app version, the status of the vulnerability, and information on the CVE itself, such as a summary and severity.
array<string>
array<string>
array<CVEID>
string
Returns the current list of Atlassian products, apps, and CVE data.
string
1
2
3
curl --request GET \
--url 'https://api.atlassian.com/vuln-transparency/v1/products' \
--header 'Accept: application/json'1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
{
"products": {
"Jira Service Management": {
"versions": {
"7.8.1": [
{
"CVE-2022-36800": "AFFECTED"
}
]
}
},
"Jira": {
"versions": {
"1.2.3": [
{
"CVE-2021-26079": "FIXED"
}
]
}
}
},
"cve_metadata": {
"CVE-2022-36800": {
"cve_summary": "Isolated permissions bypass in Jira Service Management.",
"cve_severity": 3.5,
"atl_tracking_url": "https://jira.atlassian.com/browse/JSDSERVER-11900?jql=issuetype%20%3D%20%22Public%20Security%20Vulnerability%22%20AND%20%22CVE%20ID%22%20~%20%22CVE-2022-36800%22"
},
"CVE-2021-26079": {
"cve_summary": "XSS in Jira Server and Jira Data Center.",
"cve_severity": 4.7,
"atl_tracking_url": "https://jira.atlassian.com/browse/JRASERVER-72396?jql=issuetype%20%3D%20%22Public%20Security%20Vulnerability%22%20AND%20%22CVE%20ID%22%20~%20%22CVE-2021-26079%22"
}
}
}Get a list of Atlassian products and versions released after Jan 2021 associated with them
This request has no parameters.
Returns the current list of Atlassian products and associated versions
string
1
2
3
curl --request GET \
--url 'https://api.atlassian.com/vuln-transparency/v1/products/versions' \
--header 'Accept: application/json'1
2
3
4
5
6
7
8
9
10
11
{
"Confluence Data Center": [
"8.9.1",
"8.9.0",
"8.8.1",
"8.8.0"
],
"JIRA Service Management Data Center": [
"5.15.2"
]
}Rate this page: