Advisories · Technology
Atlassian Crowd Server.
Every CVE that names Atlassian Crowd Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.0 High
Atlassian Crowd Data Center: This High severity RCE (Remote Code Execution) vulnerability was introduced in version…
- Atlassian Crowd Data Center
- Atlassian Crowd Server
- CVSS 9.8 CriticalCritical · CVSS 9+
Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call privileged endpoints in Crowd's REST API u…
- Atlassian Crowd Data Center
- Atlassian Crowd Server
- CVSS 8.8 High
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
- CVSS 9.8 CriticalCritical · CVSS 9+
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180