Advisories · Technology
Atlassian Crowd Data Center.
Every CVE that names Atlassian Crowd Data Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Files accessible to external parties in Atlassian Bamboo Data Center and others
- Atlassian Bamboo Data Center
- Atlassian Bitbucket Data Center
- Information disclosure
- CVSS 8.8 High
Improper authentication in Atlassian Crowd Data Center
- Atlassian Crowd Data Center
- Authentication bypass
- CVSS 7.9 High
XML external entity injection in Atlassian Crowd Data Center
- Atlassian Crowd Data Center
- XML external entities (XXE)
- CVSS 8.0 High
Atlassian Crowd Data Center: This High severity RCE (Remote Code Execution) vulnerability was introduced in version…
- Atlassian Crowd Data Center
- Atlassian Crowd Server
- CVSS 9.8 CriticalCritical · CVSS 9+
Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call privileged endpoints in Crowd's REST API u…
- Atlassian Crowd Data Center
- Atlassian Crowd Server
- CVSS 8.8 High
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
- CVSS 9.8 CriticalCritical · CVSS 9+
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180