Atlassian Crowd vulnerabilities

• atlassian bamboo, bamboo data center, bitbucket data center +14 more +16 more h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira... CVE-2026-21589 In KEVPublic exploit EPSS 99.7% 9.3 CriticalOctober 5, 2026
• atlassian crowd data center This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE... CVE-2026-21582 8.8 HighAugust 18, 2026
• atlassian crowd, crowd data center +1 more This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7... CVE-2026-21569 7.9 HighJanuary 28, 2026
• atlassian crowd, crowd data center, crowd server +2 more This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of... CVE-2023-22521 8.0 HighNovember 21, 2023
• atlassian crowd, crowd data center, crowd server +2 more Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application... CVE-2022-43782 9.8 CriticalNovember 17, 2022
• atlassian bamboo, bitbucket, crowd +19 more +21 more A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause... CVE-2022-26137 8.8 HighJuly 20, 2022
• atlassian bamboo, bitbucket, crowd +19 more +21 more A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to... CVE-2022-26136 9.8 CriticalJuly 20, 2022
• atlassian crowd The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0... CVE-2020-36240 5.3 MediumMarch 1, 2021
• atlassian crowd Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected... CVE-2019-20902 7.5 HighOctober 1, 2020
• atlassian crowd The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0... CVE-2019-20104 7.5 HighFebruary 6, 2020
• atlassian crowd Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow... CVE-2017-18107 6.5 MediumDecember 17, 2019
• atlassian bamboo, bitbucket, bitbucket server +8 more +10 more The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an... CVE-2019-15005 4.3 MediumNovember 8, 2019
• atlassian crowd, crowd and crowd data center +1 more Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled... CVE-2019-11580 In KEVPublic exploit EPSS 95.4% 9.8 CriticalJune 3, 2019
• atlassian application links, crowd, crucible +5 more +7 more Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0... CVE-2018-20239 5.4 MediumApril 30, 2019
• atlassian crowd The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from... CVE-2017-18110 6.5 MediumMarch 29, 2019
• atlassian crowd The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0... CVE-2017-18109 6.1 MediumMarch 29, 2019
• atlassian crowd The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows... CVE-2017-18108 7.2 HighMarch 29, 2019
• atlassian crowd The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially... CVE-2017-18106 7.5 HighMarch 29, 2019
• atlassian crowd The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before... CVE-2017-18105 8.1 HighMarch 29, 2019
• atlassian crowd Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before... CVE-2018-20238 8.1 HighFebruary 13, 2019
• atlassian crowd Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with... CVE-2016-10740 4.9 MediumJanuary 29, 2019
• atlassian crowd2 Jenkins Crowd 2 Integration Plugin stored credentials in plain text CVE-2018-1000423 Fix available 7.8 HighJanuary 9, 2019
• atlassian crowd2 Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerability CVE-2018-1000422 Fix available 6.5 MediumJanuary 9, 2019
• atlassian crowd The 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd... CVE-2017-16858 6.8 MediumJanuary 31, 2018
• atlassian crowd The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote... CVE-2016-6496 9.8 CriticalDecember 9, 2016
• atlassian crowd ** DISPUTED ** Atlassian Crowd 2.6.3 allows remote attackers to execute arbitrary commands via... CVE-2013-3926 Disputed 7.5 HighJuly 1, 2013
• atlassian crowd Atlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers... CVE-2013-3925 5.8 MediumJuly 1, 2013
• atlassian bamboo, confluence, crowd +4 more +6 more Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10;... CVE-2012-2926 Public exploit EPSS 66.3% 9.1 CriticalMay 22, 2012