CVE-2025-62718
An attacker can exploit multiple vulnerabilities in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira, and Jira Service Management to execute arbitrary code, gain elevated permissions, bypass security measures, manipulate data, disclose confidential information, or trigger a denial-of-service condition.
CSIRTS triage
- What
- An attacker can exploit multiple vulnerabilities in Atlassian products to execute arbitrary code, gain elevated permissions, bypass security measures, manipulate data, disclose confidential information, or trigger a denial-of-service condition.
- Who is affected
- Users of Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira, and Jira Service Management are affected.
- Urgency
- Remediation is high urgency due to the potential for severe exploitation and active attacks.
- Action
- Update all affected Atlassian products to the latest versions immediately.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2025-62718
Get an email if CVE-2025-62718 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Moderate exploitation risk1.2% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 65% of all EPSS-scored CVEs.
Advisory coverage (6)
- high[NEW] [high] Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira and Jira Service Management: Mul…cert-bund · 2026-08-14
- unknownUSN-8638-1: Axios vulnerabilitiesubuntu · 2026-08-13
- unknownMultiple vulnerabilities in Atlassian products (July 27, 2026)cert-fr-avis · 2026-07-27
- unknownMultiple vulnerabilities in IBM products (July 17, 2026)cert-fr-avis · 2026-07-17
- unknownMultiple vulnerabilities in IBM products (July 3, 2026)cert-fr-avis · 2026-07-03
- unknownMultiple vulnerabilities in IBM products (June 26, 2026)cert-fr-avis · 2026-06-26
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2025-62718)