Atlassian Bamboo vulnerabilities

CVEs per yearBy the year they were published

1. 20173
2. 20187
3. 20191
4. 20211

Newest CVEs

• CVE-2021-26067

  Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk…

  Atlassian · Bamboo

  Medium5.3
• CVE-2019-15005

  The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results…

  Atlassian · Bitbucket Server

  Medium4.3
• CVE-2018-5224

  Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An…

  Atlassian · Bamboo

  High8.8
• CVE-2017-18082

  The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site…

  Atlassian · Bamboo

  Medium5.4
• CVE-2017-18081

  The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting…

  Atlassian · Bamboo

  Medium6.1
• CVE-2017-18080

  The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request…

  Atlassian · Bamboo

  High8.8
• CVE-2017-18042

  The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a…

  Atlassian · Bamboo

  High8.8
• CVE-2017-18041

  The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via…

  Atlassian · Bamboo

  Medium5.4
• CVE-2017-18040

  The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross…

  Atlassian · Bamboo

  Medium5.4
• CVE-2017-14590

  Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker who has permission to create a repository…

  Atlassian · Bamboo

  Critical9.1