Atlassian Bamboo vulnerabilities

• atlassian bamboo, bamboo data center, bitbucket data center +14 more +16 more h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira... CVE-2026-21589 In KEVPublic exploit EPSS 99.7% 9.3 CriticalOctober 5, 2026
• atlassian bamboo, bamboo data center +1 more This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0... CVE-2026-21584 7.6 HighAugust 18, 2026
• atlassian bamboo, bamboo data center +1 more This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0... CVE-2026-21571 9.4 CriticalApril 21, 2026
• atlassian bamboo, bamboo data center +1 more This High severity RCE (Remote Code Execution)  vulnerability was introduced in versions 9.6.0,... CVE-2026-21570 8.6 HighMarch 17, 2026
• atlassian bamboo, bamboo data center, bamboo server +2 more This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in... CVE-2024-21689 Public exploit 7.6 HighAugust 20, 2024
• atlassian bamboo, bamboo data center, bamboo server +2 more This High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9... CVE-2024-21687 8.1 HighJuly 16, 2024
• atlassian bamboo, bamboo data center, bamboo server +2 more This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8... CVE-2023-22516 8.5 HighNovember 21, 2023
• atlassian bamboo data center, bamboo server +1 more This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023... CVE-2023-22506 7.5 HighJuly 18, 2023
• atlassian bamboo, bitbucket, crowd +19 more +21 more A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause... CVE-2022-26137 8.8 HighJuly 20, 2022
• atlassian bamboo, bitbucket, crowd +19 more +21 more A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to... CVE-2022-26136 9.8 CriticalJuly 20, 2022
• atlassian bamboo Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack... CVE-2021-26067 5.3 MediumJanuary 28, 2021
• atlassian bamboo, bitbucket, bitbucket server +8 more +10 more The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an... CVE-2019-15005 4.3 MediumNovember 8, 2019
• atlassian bamboo Bamboo did not correctly check if a configured Mercurial repository URI contained values that the... CVE-2018-5224 8.8 HighMarch 29, 2018
• atlassian bamboo The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote... CVE-2017-18082 5.4 MediumFebruary 2, 2018
• atlassian bamboo The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to... CVE-2017-18081 6.1 MediumFebruary 2, 2018
• atlassian bamboo The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote... CVE-2017-18080 8.8 HighFebruary 2, 2018
• atlassian bamboo The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote... CVE-2017-18042 8.8 HighFebruary 2, 2018
• atlassian bamboo The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0... CVE-2017-18041 5.4 MediumFebruary 2, 2018
• atlassian bamboo The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote... CVE-2017-18040 5.4 MediumFebruary 2, 2018
• atlassian bamboo Bamboo did not check that the name of a branch in a Mercurial repository contained argument... CVE-2017-14590 9.1 CriticalDecember 13, 2017
• atlassian bamboo It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags... CVE-2017-14589 9.6 CriticalDecember 13, 2017
• atlassian bamboo Bamboo before 6.0.5, 6.1.x before 6.1.4, and 6.2.x before 6.2.1 had a REST endpoint that parsed a... CVE-2017-9514 8.8 HighOctober 12, 2017
• atlassian bamboo Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo... CVE-2015-6576 Public exploit 8.8 HighOctober 2, 2017
• atlassian bamboo Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user... CVE-2017-8907 8.8 HighJune 14, 2017
• atlassian bamboo Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted... CVE-2016-5229 9.8 CriticalAugust 2, 2016
• atlassian bamboo Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not... CVE-2015-8361 9.1 CriticalFebruary 8, 2016
• atlassian bamboo An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote... CVE-2015-8360 9.8 CriticalFebruary 8, 2016
• atlassian bamboo The Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5... CVE-2014-9757 9.8 CriticalFebruary 8, 2016
• atlassian bamboo, confluence, crowd +4 more +6 more Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10;... CVE-2012-2926 Public exploit EPSS 66.3% 9.1 CriticalMay 22, 2012