Known vulnerabilities in Crucible Server - page 2

Vendor: Atlassian
Software: Crucible Server
Software CPE: cpe:2.3:a:atlassian:atlassian_crucible:*:*:*:*:*:*:*:*
Website: https://www.atlassian.com
Total vulnerabilities: 37
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Crucible Server Crucible Server is affected by 37 known vulnerabilities: 3 high, 20 medium, 14 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65892 - Insufficient Verification of Data Authenticity
CVE-2022-26137		 CWE-345 Medium
No
No
 4.8.10 29.07.2022 SB2022072917
#VU65891 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-26136		 CWE-79 Low
No
No
 4.8.10 29.07.2022 SB2022072917
#VU28495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4013		 CWE-79 Low
No
No
 4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28494 - Improper Authorization
CVE-2020-4014		 CWE-285 Low
No
No
 4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28493 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4015		 CWE-200 Medium
No
No
 4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28492 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4016		 CWE-200 Medium
No
No
 4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28491 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4017		 CWE-200 Medium
No
No
 4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28490 - Cross-Site Request Forgery (CSRF)
CVE-2020-4018		 CWE-352 Low
No
No
 4.8.1 01.06.2020 SB2020060112
#VU28489 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4023		 CWE-79 Low
No
No
 4.8.2, 4.9.0 01.06.2020 SB2020060111
#VU15808 - Permissions, Privileges, and Access Controls
CVE-2018-13399		 CWE-264 Low
No
No
 4.6.1, 4.7.0 12.11.2018 SB2018111206
#VU15366 - Cross-Site Request Forgery (CSRF)
CVE-2018-13398		 CWE-352 Low
No
No
 4.5.4, 4.6.0 15.10.2018 SB2018101506
#VU14027 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13388		 CWE-79 Low
No
No
 4.5.3 23.07.2018 SB2018072703
#VU14028 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-16859		 CWE-22 Low
No
No
 4.3.2, 4.4.3, 4.5.0 10.07.2018 SB2018072703
#VU12615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5228		 CWE-79 Low
No
No
 - 14.05.2018 SB2018030809
#VU12441 - Improper input validation
CVE-2018-5223		 CWE-20 High
No
No
 - 07.05.2018 SB2018030809
#VU10666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18091		 CWE-79 Low
No
No
 - 21.02.2018 SB2018022104
#VU10665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18093		 CWE-79 Low
No
No
 - 21.02.2018 SB2018022104


Showing elements 21 - 40 out of 37