Login Request a demo
BA
Product
Bamboo
by Atlassian · last CVE Oct 5, 2026
On CISA KEVExploited in the wild
28
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities28In the news8Timeline
Severity mix
Critical 8High 14Medium 6Low 0
Severity
All severities28Critical8High14Medium6Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Bamboo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-18081
6.1
1%
Feb 2
The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability…
Affected: before 6.3.1
CVE-2017-18082
5.4
1%
Feb 2
The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS)…
Affected: before 6.2.3
CVE-2017-18041
5.4
1%
Feb 2
The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site…
Affected: before 6.2.0
CVE-2017-18040
5.4
1%
Feb 2
The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS)…
Affected: before 6.2
CVE-2021-26067
5.3
1%
Jan 28
Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk and if certain files…
Affected: before 7.2.2
CVE-2019-15005
4.3
1%
Nov 8
The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified…
Affected: before 6.10.2
Showing 6