BD
Product
Bamboo Data Center
On CISA KEVExploited in the wild
5
CVEs
1
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 5Medium 0Low 0
Watch
Add Bamboo Data Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21589 In wildKEV | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Affected: All other versions |
| CVE-2026-21571 | 8.8 | Apr 21 | This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center Affected: 12.1.0 to 12.1.3; 12.0.0 to 12.0.2; 11.0.0 to 11.0.8; 10.2.0 to 10.2.16; 10.1.0 to 10.1.1; 10.0.0 to 10.0.3; +1 more |
| CVE-2026-21570 | 8.8 | Mar 17 | This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center Affected: 12.1.0 to 12.1.2; 12.0.0 to 12.0.2; 11.0.0 to 11.0.8; 10.2.0 to 10.2.15; 10.1.0 to 10.1.1; 10.0.0 to 10.0.3; +1 more |
| CVE-2023-22506 | 8.8 | Jul 19 | This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center Affected: 8.0.0 before 9.2.3 |
| CVE-2026-21584 | 8.1 | Aug 18 | This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center Affected: 12.1.0 to 12.1.9; 12.0.0 to 12.0.2; 11.0.0 to 11.0.8; 10.2.0 to 10.2.21; 10.1.0 to 10.1.1; 10.0.0 to 10.0.3 |
Showing 5