Bottom-line-up-front (BLUF)
The Vulnerability Intel Agent now ingests each Atlassian security release within minutes of publication and continuously enriches every CVE with CVSS, EPSS, attack-path details, patch availability, and exploitation signals like proof-of-concept activity and CISA KEV as they emerge.
You can filter the release by attack path, the products you run, or your patch criteria to focus on the CVEs that require action.
Challenge
The number of CVEs disclosed in security releases is rising as vendors and researchers increasingly use AI to uncover vulnerabilities, while the time between disclosure and exploitation continues to shrink.
For a team running just a handful of Atlassian products, quickly identifying which CVEs actually matter from a recent security release, and then manually validating each against severity, attack path, and internal patching policies, becomes increasingly difficult as the list grows.
How does it work?
- Add the filter. In the Vulnerability Intel Agent, select the Atlassian security release you want, or “Latest Atlassian Security Release,” which always points at the most recent one, and set the date range. Every CVE from the release appears in the output table. Atlassian is one of several vendor advisories available.
- Columns. Each enrichment field is a column, alongside the CVE ID and a plain description of the vulnerability. Reorder, show, or hide them to match how you triage.
- Alerts. Deploy the Intel Agent and get notified when new CVEs match your filters.
Filter to your stack
Filter the release at the product level, down to the Atlassian products you actually run.
The July 21st release includes 3 CVEs affecting Confluence Data Center, Sourcetree, and Jira. You can focus on the systems in your environment and prioritize your patch or remediation accordingly.
Filter by attack path
Add filters for attack vector, privileges required, and user interaction.
The July 21st, 2026 release includes 28 CVEs that can be reached by an attacker without credentials or any user interaction.
Filter by your patch policy
Most patch-now policies come down to a threshold: CVSS above a certain score, EPSS above a certain probability, or both. Set those thresholds as filters.
The July 21st release includes 17 CVEs at CVSS 8 and above with EPSS above 80%. You can remediate them immediately under your SLA and leave the rest for the normal patch cycle.
Filter CVEs by attack path, products, or patch policy
Curious to see how Feedly Threat Intelligence can help you collect and prioritize Apple vulnerabilities faster?
FAQs
Does the Feedly Vulnerability Intel Agent support vendors other than Atlassian?
Yes. Atlassian is one of several vendor advisories available in the Vulnerability Intel Agent. We have: Adobe, Android, Apache, Apple, Microsoft, and Oracle.
Do I need to patch Atlassian Cloud products for new CVEs?
No. Atlassian handles patching for its Cloud products, so there’s nothing on your side.
Are Atlassian Data Center products my responsibility to patch?
Yes. Data Center products are self-hosted, so patching and upgrades are on you. For some CVEs, remediation means upgrading to a newer version rather than patching the one you’re on, which takes more planning.
Why do Atlassian security advisories list non-Atlassian software?
Atlassian advisories can include CVEs tied to the third-party components they embed, not just Atlassian products. Those are easy to miss in a regular CVE AI Feed, but you’ll catch them working from the advisory.
How fast does Feedly ingest a new Atlassian security release?
Within minutes of publication. Each CVE is then enriched continuously as new signals emerge.
What is the “Latest Atlassian Security Release” filter in Feedly?
A filter that always points at the most recent Atlassian release, so you don’t have to update it each time a new one drops.
How do I filter Atlassian CVEs by CVSS, EPSS, and attack path?
Set thresholds and filters on CVSS, EPSS, attack path (attack vector, privileges required, user interaction), patch availability, and exploitation signals like proof-of-concept activity and CISA KEV.
Can I get alerts for new Atlassian CVEs that match my filters?
Yes. Deploy the Intel Agent and get notified when new CVEs match your filters.
