Known vulnerabilities in Bamboo Server - page 2

Vendor: Atlassian
Software: Bamboo Server
Software CPE: cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*
Total vulnerabilities: 64
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bamboo Server Bamboo Server is affected by 64 known vulnerabilities: 1 critical, 4 high, 53 medium, 6 low Critical High Medium Low

Vulnerabilities (64)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100095 - Memory corruption
CVE-2024-47072
CWE-119 Medium
No
No
9.2.21, 9.6.10, 10.2.1 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU98024 - Improper input validation
CVE-2024-47561
CWE-20 High
No
No
9.2.20, 9.6.8, 10.0.3 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254
CWE-674 Medium
No
No
9.6.7, 10.0.2 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96450 - Improper input validation
CVE-2024-21689
CWE-20 Medium
No
No
9.2.17, 9.6.5 22.08.2024 SB2024082255
#VU94795 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2024-21687
CWE-98 Medium
No
No
9.2.16, 9.6.4 28.07.2024 SB2024072803
#VU93732 - Resource Management Errors
CVE-2024-34750
CWE-399 Medium
No
No
9.2.17, 9.6.4, 10.0.0 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262
CWE-918 Medium
No
No
9.2.14, 9.6.3 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
9.2.14, 9.5.4, 9.6.2 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
9.2.14, 9.5.4, 9.6.2 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU87615 - Resource exhaustion
CVE-2023-52428
CWE-400 Medium
No
No
9.2.15, 9.4.3, 9.5.3, 9.6.3 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259
CWE-918 Medium
No
No
9.2.13, 9.5.3, 9.6.1 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU87607 - Improper Access Control
CVE-2024-22257
CWE-284 Medium
No
No
9.2.13, 9.5.3, 9.6.1 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU87510 - Improper input validation
CVE-2024-24549
CWE-20 Medium
Available
No
9.2.13, 9.5.3, 9.6.1 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243
CWE-918 Medium
Available
No
9.2.12, 9.5.2 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710
CWE-835 Medium
No
No
9.2.12, 9.4.4, 9.5.2 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410
CWE-502 Medium
No
No
9.2.8, 9.3.6, 9.4.2 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU81948 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-4759
CWE-59 Medium
No
No
9.2.14, 9.4.4, 9.5.2 12.10.2023 SB2023101242
SB2023101243
SB2023103012
and 21 more
#VU77782 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-4244
CWE-22 Medium
No
No
9.2.8 29.06.2023 SB2023062905
SB2023062907
SB2024032220
#VU73175 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31159
CWE-22 Medium
No
No
9.2.9 08.03.2023 SB2023030823
SB2023030915
SB2023042635
and 15 more
#VU49039 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-26217
CWE-78 Medium
Available
No
9.2.8 16.11.2020 SB2020111622
SB2020121624
SB20210120118
and 14 more


Showing elements 21 - 40 out of 64