CR
Product
Crowd
On CISA KEVExploited in the wildRansomware-linked
25
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 5High 10Medium 8Low 0
Watch
Add Crowd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11580 RansomwareIn wildKEV | 9.8 | Jun 3 | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Affected: 2.1.0 before unspecified; before 3.0.5; 3.1.0 before unspecified; before 3.1.6; 3.2.0 before unspecified; before 3.2.8; +4 more |
| CVE-2022-43782 | 9.8 | Nov 17 | Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call privileged endpoints… Affected: 3.0.0 before 4.4.4; 5.0.0 before 5.0.3 |
| CVE-2022-26136 | 9.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps Affected: before 4.3.8; 4.4.0 before 4.4.2; 5.0.0 |
| CVE-2016-6496 | 9.8 | Dec 9 | The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted… Affected: through 2.8.4; 2.9.0; 2.9.1 |
| CVE-2012-2926 | 9.1 | May 22 | Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo… Affected: before 2.0.9; 2.1 before 2.1.2; 2.2.0 before 2.2.9; 2.3.0 before 2.3.7; 2.4.0 before 2.4.1 |
Showing 5