CR
Product
Crucible
On CISA KEVExploited in the wild
53
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 5High 11Medium 37Low 0
Watch
Add Crucible to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26136 | 9.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps Affected: before 4.8.10 |
| CVE-2021-43958 | 9.8 | Mar 16 | Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login credentials as rest resources did not check if users were… Affected: before 4.8.9 |
| CVE-2017-16861 | 9.8 | Feb 1 | It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files to occur Affected: before 4.4.5; 4.5.0 before 4.5.2 |
| CVE-2012-2926 | 9.1 | May 22 | Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo… Affected: before 2.5.8; 2.6 before 2.6.8; 2.7 before 2.7.12 |
| CVE-2017-14591 | 9.0 | Nov 29 | Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to… Affected: before 4.4.3; 4.5.0 |
Showing 5