Atlassian Bamboo Server
6 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-21689 | 9.4.0 to 9.4.4 ; 9.3.0 to 9.3.6 ; 9.2.1 to 9.2.16 ; … | This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, a | HIGH 8.0 | 2.6 % | ||
| CVE-2024-21687 | 9.4.0 to 9.4.4 ; 9.3.0 to 9.3.6 ; 9.2.1 to 9.2.15 ; … | This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo Data | HIGH 8.1 | 0.7 % | ||
| CVE-2023-22516 | >= 8.1.0 ; >= 8.1.1 ; >= 8.1.10 ; … | This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamb | HIGH 8.8 | 1.2 % | ||
| CVE-2023-22506 | >= 8.0.0 | This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo | HIGH 8.8 | 2.1 % | ||
| CVE-2022-26137 | unspecified – < 8.0.9 ; 8.1.0 – < unspecified ; unspecified – < 8.1.8 ; … | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked w | HIGH 8.8 | 2.4 % | ||
| CVE-2022-26136 | unspecified – < 8.0.9 ; 8.1.0 – < unspecified ; unspecified – < 8.1.8 ; … | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third p | CRITICAL 9.8 | 5.7 % |