Advisories · Technology
Atlassian Bamboo Data Center.
Every CVE that names Atlassian Bamboo Data Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Files accessible to external parties in Atlassian Bamboo Data Center and others
- Atlassian Bamboo Data Center
- Atlassian Bitbucket Data Center
- Information disclosure
- CVSS 7.6 High
Improper authorization in Atlassian Bamboo Data Center
- Atlassian Bamboo Data Center
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
OS command injection in Atlassian Bamboo Data Center
- Atlassian Bamboo Data Center
- Command injection
- CVSS 8.6 High
Code injection in Atlassian Bamboo Data Center
- Atlassian Bamboo Data Center
- Code injection
- CVSS 7.6 High
Code injection in Atlassian Bamboo Data Center and others
- Atlassian Bamboo Data Center
- Atlassian Bamboo Server
- Code injection
- CVSS 8.1 High
PHP file inclusion in Atlassian Bamboo Data Center and others
- Atlassian Bamboo Data Center
- Atlassian Bamboo Server
- File inclusion
- CVSS 8.5 High
Atlassian Bamboo Data Center: This High severity RCE (Remote Code Execution) vulnerability was introduced in versions…
- Atlassian Bamboo Data Center
- Atlassian Bamboo Server
- CVSS 7.5 High
Code injection in Atlassian Bamboo Data Center and others
- Atlassian Bamboo Data Center
- Atlassian Bamboo Server
- Code injection
- CVSS 8.8 High
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
- CVSS 9.8 CriticalCritical · CVSS 9+
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180