Atlassian Crowd Schwachstellen (CVE)

Für Atlassian Crowd veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

6 Ergebnisse
9.3Kritisch
CVE-2026-21589 KEV

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Atlassian Bamboo Data Center; Atlassian Bitbucket Data Center; Atlassian Confluence Data Center; Atlassian Crowd Data Center

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthent…

100%EPSS
7.9Hoch
CVE-2026-21569
Atlassian Crowd Data Center

This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. This XXE (XML External Entity Injection) vulnerability, with a CVSS Score of 7.9, allows an authenticated attacker to acc…

8.8Hoch
CVE-2022-26137
Atlassian Bamboo Server; Atlassian Bamboo Data Center; Atlassian Bitbucket Server; Atlassian Bitbucket Data Center

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlassian has confirmed and fixed the only known security issue as…

2.4%EPSS
9.8Kritisch
CVE-2022-26136
Atlassian Bamboo Server; Atlassian Bamboo Data Center; Atlassian Bitbucket Server; Atlassian Bitbucket Data Center

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability c…

5.7%EPSS
Ohne Score
CVE-2019-15005
Atlassian Bitbucket Server; Atlassian Jira Server; Atlassian Confluence Server; Atlassian Crowd

The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contai…

1.3%EPSS