Advisories · Technology

Atlassian Fisheye.

Every CVE that names Atlassian Fisheye among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-26137 CVE record

CVSS 8.8 High

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2022-26136 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2021-43958 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unlimited authentication attempts in Atlassian Fisheye and others
- Atlassian Fisheye
- Atlassian Crucible
- Authentication bypass
Not analysed yet 16 Mar 2022
CVE-2021-43957 CVE record

CVSS 7.5 High

Insecure direct object reference in Atlassian Fisheye and others
- Atlassian Fisheye
- Atlassian Crucible
- Broken access control
Not analysed yet 16 Mar 2022
CVE-2021-43956 CVE record

Atlassian Fisheye: The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed…
- Atlassian Fisheye
- Atlassian Crucible
Not analysed yet 16 Mar 2022
CVE-2021-43955 CVE record

Atlassian Fisheye: The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9…
- Atlassian Fisheye
- Atlassian Crucible
Not analysed yet 16 Mar 2022
CVE-2021-43954 CVE record

Atlassian Fisheye: The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9…
- Atlassian Fisheye
- Atlassian Crucible
Not analysed yet 14 Mar 2022
CVE-2020-14192 CVE record

Atlassian Fisheye: Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a…
- Atlassian Fisheye
- Atlassian Crucible
Not analysed yet 1 Feb 2021
CVE-2020-29446 CVE record

Atlassian Fisheye: Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local…
- Atlassian Fisheye
- Atlassian Crucible
Not analysed yet 18 Jan 2021
CVE-2020-14190 CVE record

Atlassian Fisheye: Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex…
- Atlassian Fisheye
- Atlassian Crucible
Not analysed yet 25 Nov 2020
CVE-2020-14191 CVE record

Atlassian Fisheye: Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the…
- Atlassian Fisheye
- Atlassian Crucible
Not analysed yet 25 Nov 2020
CVE-2017-18112 CVE record

Atlassian Fisheye: Affected versions of Atlassian Fisheye allow remote attackers to view the HTTP password…
- Atlassian Fisheye
Not analysed yet 5 Aug 2020
CVE-2020-4026 CVE record

Atlassian Navigator Links: The CustomAppsRestResource list resource in Atlassian Navigator Links before version…
- Atlassian Navigator Links
- Atlassian Crucible
Not analysed yet 2 Jun 2020
CVE-2020-4023 CVE record

Atlassian Crucible: The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 1 Jun 2020
CVE-2020-4018 CVE record

Atlassian Crucible: The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 1 Jun 2020
CVE-2020-4017 CVE record

Atlassian Crucible: The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 1 Jun 2020
CVE-2020-4016 CVE record

Atlassian Crucible: The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 1 Jun 2020
CVE-2020-4015 CVE record

Atlassian Crucible: The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 1 Jun 2020
CVE-2020-4014 CVE record

Atlassian Crucible: The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 1 Jun 2020
CVE-2020-4013 CVE record

Atlassian Crucible: The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 1 Jun 2020
CVE-2019-15009 CVE record

Atlassian Crucible: The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 11 Dec 2019
CVE-2019-15008 CVE record

Atlassian Crucible: The /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 11 Dec 2019
CVE-2019-15007 CVE record

Atlassian Crucible: The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote…
- Atlassian Crucible
- Atlassian Fisheye
Not analysed yet 11 Dec 2019
CVE-2019-15005 CVE record

Atlassian Bitbucket Server: The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an…
- Atlassian Bitbucket Server
- Atlassian Jira Server
Not analysed yet 8 Nov 2019
CVE-2017-18090 CVE record

Atlassian Fisheye: Various resources in Atlassian Fisheye before version 4.5.1 (the fixed version for 4.5.x)…
- Atlassian Fisheye
Not analysed yet 16 Feb 2018
CVE-2017-9510 CVE record

Atlassian Fisheye: The repository changelog resource in Atlassian Fisheye before version 4.4.1 allows remote…
- Atlassian Fisheye
Not analysed yet 24 Aug 2017