Atlassian Crowd Server vulnerabilities

4 published CVEs name Atlassian Crowd Server among the affected products.

Critical 2High 2Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2023-22521
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. This RCE (Remote Code Execution)…
Atlassian · Crowd Data Center
High8.0
CVE-2022-43782
Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call…
Atlassian · Crowd Data Center
Critical9.8
CVE-2022-26137
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application…
Atlassian · Bamboo Server
High8.8
CVE-2022-26136
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The…
Atlassian · Bamboo Server
Critical9.8