BA
Product
Bamboo
On CISA KEVExploited in the wild
28
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 8High 14Medium 6Low 0
Watch
Add Bamboo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26136 | 9.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps Affected: 7.2.0 before 7.2.10; 8.0.0 before 8.0.9; 8.1.0 before 8.1.8; 8.2.0 before 8.2.4 |
| CVE-2016-5229 | 9.8 | Aug 2 | Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via… Affected: through 5.11.3; 5.12.0; 5.12.1; 5.12.2 |
| CVE-2015-8360 | 9.8 | Feb 8 | An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote attackers to execute arbitrary Java code via serialized data to the JMS port Affected: 2.3.1; 2.4; 2.4.1; 2.4.2; 2.4.3; 2.5; +34 more |
| CVE-2014-9757 | 9.8 | Feb 8 | The Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0, allows remote configured XMPP servers to execute arbitrary Java code via… Affected: 2.4; 2.4.1; 2.4.2; 2.4.3; 2.5; 2.5.1; +34 more |
| CVE-2017-14589 | 9.6 | Dec 13 | It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur Affected: before 6.1.6; 6.2.0 before 6.2.5 |
| CVE-2017-14590 | 9.1 | Dec 13 | Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters Affected: 2.7.0 before 6.1.6; 6.2.0 before 6.2.5 |
| CVE-2015-8361 | 9.1 | Feb 8 | Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, which allows remote attackers to obtain sensitive… Affected: 2.4; 2.4.1; 2.4.2; 2.4.3; 2.5; 2.5.1; +34 more |
| CVE-2012-2926 | 9.1 | May 22 | Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo… Affected: before 3.3.4; 3.4 before 3.4.5 |
Showing 8