Atlassian Bamboo Data Center

10 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2026-21589All other versionsThis is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, BaCRITICAL 9.399 %KEV
CVE-2026-2158412.1.0 to 12.1.9 ; 12.0.0 to 12.0.2 ; 11.0.0 to 11.0.8 ; …This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of BamHIGH 7.60.4 %
CVE-2026-2157112.1.0 to 12.1.3 ; 12.0.0 to 12.0.2 ; 11.0.0 to 11.0.8 ; …This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0,CRITICAL 9.41.3 %
CVE-2026-2157012.1.0 to 12.1.2 ; 12.0.0 to 12.0.2 ; 11.0.0 to 11.0.8 ; …This High severity RCE (Remote Code Execution)  vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0HIGH 8.60.6 %
CVE-2024-216899.6.0 to 9.6.4 ; 9.5.0 to 9.5.4 ; 9.4.0 to 9.4.4 ; …This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, aHIGH 8.02.6 %
CVE-2024-216879.6.0 to 9.6.3 ; 9.5.0 to 9.5.4 ; 9.4.0 to 9.4.4 ; …This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo DataHIGH 8.10.7 %
CVE-2023-22516>= 8.1.0 ; >= 8.1.1 ; >= 8.1.10 ; …This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of BambHIGH 8.81.2 %
CVE-2023-22506>= 8.0.0This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of BambooHIGH 8.82.1 %
CVE-2022-26137unspecified – < 8.0.9 ; 8.1.0 – < unspecified ; unspecified – < 8.1.8 ; …A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked wHIGH 8.82.4 %
CVE-2022-26136unspecified – < 8.0.9 ; 8.1.0 – < unspecified ; unspecified – < 8.1.8 ; …A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third pCRITICAL 9.85.7 %