Atlassian Bamboo Server vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20232
3. 20242

Newest CVEs

• CVE-2024-21689

  This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo…

  Atlassian · Bamboo Data Center

  High7.6
• CVE-2024-21687

  This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 and 9.6.0 of Bamboo Data Center and Server.…

  Atlassian · Bamboo Data Center

  High8.1
• CVE-2023-22516

  This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamboo Data Center and…

  Atlassian · Bamboo Data Center

  High8.5
• CVE-2023-22506

  This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This…

  Atlassian · Bamboo Data Center

  High7.5
• CVE-2022-26137

  A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application…

  Atlassian · Bamboo Server

  High8.8
• CVE-2022-26136

  A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The…

  Atlassian · Bamboo Server

  Critical9.8