Known vulnerabilities in Bamboo Server - page 3

Vendor: Atlassian
Software: Bamboo Server
Software CPE: cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*
Total vulnerabilities: 64
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bamboo Server Bamboo Server is affected by 64 known vulnerabilities: 1 critical, 4 high, 53 medium, 6 low Critical High Medium Low

Vulnerabilities (64)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86992 - Allocation of Resources Without Limits or Throttling
CVE-2024-21634
CWE-770 Medium
No
No
9.2.12, 9.4.4, 9.5.2 04.03.2024 SB2024030419
SB2024031125
SB2024032143
and 18 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597
CWE-89 High
No
No
9.2.12, 9.4.4, 9.5.2 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589
CWE-444 Medium
No
No
9.2.8, 9.3.6, 9.4.2 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU83451 - Improper input validation
CVE-2023-22516
CWE-20 Medium
No
No
9.2.7, 9.3.4 23.11.2023 SB20231123107
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604
CWE-502 Critical
Available
Exploited
9.2.7, 9.3.5, 9.4.1 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
9.2.7, 9.3.5, 9.4.2 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794
CWE-749 Medium
No
No
9.2.7, 9.3.5 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
9.2.7, 9.3.5 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81726 - Integer overflow
CVE-2023-36478
CWE-190 Medium
No
No
9.2.8, 9.3.6, 9.4.2 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635
CWE-681 Medium
No
No
9.2.7, 9.3.5 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU77778 - Improper input validation
CVE-2022-29546
CWE-20 Low
No
No
9.2.7, 9.3.5 28.06.2023 SB2022050443
SB20230719104
SB20231018117
and 10 more
#VU77777 - Improper input validation
CVE-2022-28366
CWE-20 Low
No
No
9.2.7, 9.3.5 28.06.2023 SB2022042155
SB2023112475
SB2023121271
and 7 more
#VU77227 - Resource exhaustion
CVE-2023-34396
CWE-400 Medium
No
No
9.2.5, 9.3.4 13.06.2023 SB2023061351
SB2023070502
SB2023071316
and 12 more
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709
CWE-770 Medium
No
No
9.2.4, 9.3.1 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
9.2.4, 9.3.1 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71586 - Out-of-bounds write
CVE-2022-40152
CWE-787 Medium
No
No
9.2.9 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU65499 - Improper input validation
CVE-2021-31684
CWE-20 Medium
No
No
9.2.7, 9.3.5 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU65486 - Improper input validation
CVE-2022-24839
CWE-20 Medium
No
No
9.2.7, 9.3.5 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649
CWE-611 Medium
No
No
9.2.7, 9.3.5 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU8802 - Improper input validation
CVE-2017-7957
CWE-20 Medium
No
No
9.2.8 04.10.2017 SB2017101109
SB2017050308
SB2024032217
and 2 more


Showing elements 41 - 60 out of 64