Known vulnerabilities in Bamboo Data Center

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:bamboo_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 82
Public exploits: 7
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bamboo Data Center Bamboo Data Center is affected by 82 known vulnerabilities: 10 high, 68 medium, 4 low Critical High Medium Low

Vulnerabilities (82)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153326 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-21589
CWE-22 Medium
No
No
10.2.24, 12.1.12 06.10.2026 SB2026100635
SB2026100636
SB2026100637
and 5 more
#VU150178 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-55153
CWE-470 Low
No
No
10.2.19, 12.1.7 16.09.2026 SB2026091629
SB2026091635
SB2026091639
#VU146456 - Insufficient Verification of Data Authenticity
CVE-2026-59642
CWE-345 Medium
No
No
10.2.22, 12.1.10 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146438 - Improper Verification of Cryptographic Signature
CVE-2026-12803
CWE-347 Medium
No
No
10.2.22, 12.1.10 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146439 - Improper Verification of Cryptographic Signature
CVE-2026-12816
CWE-347 Medium
No
No
10.2.22, 12.1.10 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146443 - Uncontrolled Recursion
CVE-2026-13506
CWE-674 Medium
No
No
10.2.22, 12.1.10 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146447 - Inefficient Algorithmic Complexity
CVE-2026-58059
CWE-407 Medium
No
No
10.2.22, 12.1.10 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146448 - Uncontrolled Memory Allocation
CVE-2026-58060
CWE-789 Medium
No
No
10.2.22, 12.1.10 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU145387 - Missing release of memory after effective lifetime
CVE-2026-68763
CWE-401 Medium
No
No
10.2.22, 12.1.11 26.08.2026 SB2026082616
SB2026091634
SB2026091642
and 4 more
#VU141319 - Improper input validation
CVE-2026-75595
CWE-20 Medium
No
No
10.2.22, 12.1.11 08.08.2026 SB2026080807
SB2026091634
SB2026091654
and 1 more
#VU139385 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-46625
CWE-1321 Medium
No
No
10.2.22, 12.1.9 26.07.2026 SB2026072610
SB2026072615
SB2026072616
and 4 more
#VU139252 - Resource exhaustion
CVE-2026-73507
CWE-400 Medium
No
No
10.2.22, 12.1.10 24.07.2026 SB2026072404
SB2026091634
SB2026091638
and 3 more
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512
CWE-502 High
No
No
10.2.23, 12.1.10 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 36 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513
CWE-184 High
No
No
10.2.23, 12.1.10 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU139098 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-73646
CWE-22 Medium
No
No
10.2.22, 12.1.11 22.07.2026 SB2026072248
SB2026091634
SB2026091640
and 2 more
#VU139097 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45623
CWE-22 Medium
Available
No
10.2.21, 12.1.9 22.07.2026 SB2026072247
SB2026083177
SB2026083181
and 1 more
#VU139083 - Interpretation Conflict
CVE-2026-6322
CWE-436 Medium
No
No
10.2.22 22.07.2026 SB2026072227
SB2026072231
SB2026072232
and 18 more
#VU139082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-6321
CWE-22 Medium
No
No
10.2.22 22.07.2026 SB2026072227
SB2026072228
SB2026072229
and 13 more
#VU137568 - Missing Release of Resource after Effective Lifetime
CVE-2026-56745
CWE-772 Medium
No
No
10.2.22, 12.1.10 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404
CWE-670 Medium
No
No
10.2.22, 12.1.10 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 13 more


Showing elements 1 - 20 out of 82