Latest vulnerabilities for "atlassian crowd"

8.8

First published (updated )

CVE-2023-22521

Atlassian CrowdAffected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via …

9.8

First published (updated )

CVE-2022-43782

Atlassian BitbucketA vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause ad…

8.8

First published (updated )

CVE-2022-26137

Atlassian BitbucketA vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass S…

9.8

First published (updated )

CVE-2022-26136

Atlassian CrowdThe ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4…

5.3

First published (updated )

CVE-2020-36240

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Atlassian CrowdUpgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected ver…

7.5

First published (updated )

CVE-2019-20902

Atlassian CrowdThe OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before…

7.5

First published (updated )

CVE-2019-20104

Atlassian Troubleshooting and SupportThe Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivilege…

4.3

First published (updated )

CVE-2019-15005

Atlassian CrowdAtlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

9.8

Exploited

First published (updated )

CVE-2019-11580

Atlassian Application LinksXSS

5.4

First published (updated )

CVE-2018-20239

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Atlassian CrowdCode Injection

7.2

First published (updated )

CVE-2017-18108

Atlassian CrowdThe login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before …

6.1

First published (updated )

CVE-2017-18109

Atlassian CrowdXEE

6.5

First published (updated )

CVE-2017-18110

Atlassian CrowdThe identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially co…

7.5

First published (updated )

CVE-2017-18106

Atlassian CrowdVarious rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version…

8.1

First published (updated )

CVE-2018-20238

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Atlassian CrowdCSRF

6.5

First published (updated )

CVE-2017-18107

Atlassian CrowdInfoleak

4.9

First published (updated )

CVE-2016-10740

Atlassian CrowdThe console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before ver…

8.1

First published (updated )

CVE-2017-18105

Atlassian CrowdThe 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd fr…

6.8

First published (updated )

CVE-2017-16858

Atlassian CrowdInput Validation

9.8

First published (updated )

CVE-2016-6496

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Atlassian CrowdInput Validation

5.8

First published (updated )

CVE-2013-3925

Atlassian CrowdAtlassian Crowd 2.6.3 allows remote attackers to execute arbitrary commands via unspecified vectors …

7.5

First published (updated )

CVE-2013-3926

Atlassian CrowdAtlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; Fish…