Known vulnerabilities in Crucible Server

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:atlassian_crucible:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 4
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Crucible Server Crucible Server is affected by 56 known vulnerabilities: 6 high, 35 medium, 15 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150179 - Allocation of Resources Without Limits or Throttling
CVE-2026-75140
CWE-770 Medium
No
No
4.9.14 16.09.2026 SB2026091630
SB2026091639
SB2026092311
and 1 more
#VU150178 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-55153
CWE-470 Low
No
No
4.9.14 16.09.2026 SB2026091629
SB2026091635
SB2026091639
#VU146453 - Improper input validation
CVE-2026-59639
CWE-20 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146456 - Insufficient Verification of Data Authenticity
CVE-2026-59642
CWE-345 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146464 - Improper input validation
CVE-2026-59650
CWE-20 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 7 more
#VU146435 - Improper Certificate Validation
CVE-2026-8763
CWE-295 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 8 more
#VU146437 - Insufficient Verification of Data Authenticity
CVE-2026-12802
CWE-345 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146438 - Improper Verification of Cryptographic Signature
CVE-2026-12803
CWE-347 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146439 - Improper Verification of Cryptographic Signature
CVE-2026-12816
CWE-347 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146443 - Uncontrolled Recursion
CVE-2026-13506
CWE-674 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146445 - Uncontrolled Memory Allocation
CVE-2026-14682
CWE-789 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146447 - Inefficient Algorithmic Complexity
CVE-2026-58059
CWE-407 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146448 - Uncontrolled Memory Allocation
CVE-2026-58060
CWE-789 Medium
No
No
4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU145265 - Allocation of Resources Without Limits or Throttling
CVE-2026-54428
CWE-770 Medium
No
No
4.9.14 25.08.2026 SB2026082579
SB2026091639
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512
CWE-502 High
No
No
4.9.13 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 36 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513
CWE-184 High
No
No
4.9.13 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU137397 - Improper Handling of Alternate Encoding
CVE-2026-10050
CWE-173 High
No
No
4.9.13 13.07.2026 SB2026071348
SB2026081819
SB2026083180
and 2 more
#VU135919 - Selection of Less-Secure Algorithm During Negotiat
CVE-2026-54291
CWE-757 Medium
No
No
4.9.12 30.06.2026 SB2026063034
SB2026073042
SB2026080425
and 7 more
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332
CWE-444 Medium
No
No
4.9.13 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 13 more
#VU60181 - Resource Management Errors
CVE-2021-22569
CWE-399 Medium
Available
No
4.9.12 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more


Showing elements 1 - 20 out of 56