BD
Product
Bamboo Data Center
by Atlassian · last CVE Oct 5, 2026
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 0Low 0
Watch

Add Bamboo Data Center to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-21589
In wildKEV
7.5
99%
Oct 5
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Affected: All other versions
CVE-2026-21571
8.8
1%
Apr 21
This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center
Affected: 12.1.0 to 12.1.3; 12.0.0 to 12.0.2; 11.0.0 to 11.0.8; 10.2.0 to 10.2.16; 10.1.0 to 10.1.1; 10.0.0 to 10.0.3; +1 more
CVE-2023-22506
8.8
2%
Jul 19
This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center
Affected: 8.0.0 before 9.2.3
CVE-2026-21584
8.1
0%
Aug 18
This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center
Affected: 12.1.0 to 12.1.9; 12.0.0 to 12.0.2; 11.0.0 to 11.0.8; 10.2.0 to 10.2.21; 10.1.0 to 10.1.1; 10.0.0 to 10.0.3
Showing 4