CR
Product
Crucible
On CISA KEVExploited in the wild
53
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 5High 11Medium 37Low 0
Watch
Add Crucible to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21589 In wildKEV | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Affected: before 4.9.15 |
| CVE-2024-21683 | 8.8 | May 21 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server Affected: 4.8.0 before 4.8.15 |
| CVE-2022-26137 | 8.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests… Affected: before 4.8.10 |
| CVE-2020-4018 | 8.8 | Jun 1 | The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setup process via a cross-site request forgery (CSRF)… Affected: before 4.8.1 |
| CVE-2018-13399 | 7.8 | Oct 16 | The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the… Affected: before 4.6.1 |
| CVE-2021-43957 | 7.5 | Mar 16 | Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability in the WEB-INF… Affected: before 4.8.9 |
| CVE-2020-14190 | 7.5 | Nov 25 | Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL Affected: before 4.8.4 |
| CVE-2020-14191 | 7.5 | Nov 25 | Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the… Affected: before 4.8.4 |
| CVE-2017-9511 | 7.5 | Aug 24 | The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability… Affected: through 4.4.0 |
| CVE-2017-9512 | 7.5 | Aug 24 | The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to access sensitive information, for example email… Affected: through 4.4.0 |
| CVE-2018-5223 | 7.2 | Mar 29 | Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters Affected: 4.4.0 before 4.4.6; 4.5.0 before 4.5.3 |
Showing 11