Known vulnerabilities in Bamboo Data Center - page 2

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:bamboo_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 42
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bamboo Data Center Bamboo Data Center is affected by 42 known vulnerabilities: 5 high, 35 medium, 2 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132316 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-67030
CWE-22 High
No
No
10.2.19, 12.1.7 26.05.2026 SB2026052670
SB2026052672
SB2026052673
and 14 more
#VU132259 - Covert Timing Channel
CVE-2026-5598
CWE-385 Medium
No
No
10.2.19, 12.1.7 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 16 more
#VU131179 - Improper Handling of Case Sensitivity
CVE-2026-43513
CWE-178 Medium
No
No
10.2.20, 12.1.8 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 19 more
#VU130215 - Resource exhaustion
CVE-2026-42587
CWE-400 Medium
No
No
10.2.20, 12.1.8 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 12 more
#VU127603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42033
CWE-1321 Medium
No
No
10.2.20, 12.1.8 24.04.2026 SB20260424169
SB2026061954
SB2026061992
and 11 more
#VU127599 - Improper Access Control
CVE-2026-42038
CWE-284 Medium
No
No
10.2.20, 12.1.8 24.04.2026 SB20260424169
SB2026061992
SB2026061993
and 9 more
#VU126752 - Improper input validation
CVE-2026-27727
CWE-20 High
No
No
9.6.26, 10.2.19, 12.1.7 22.04.2026 SB20260422128
SB20260422169
SB20260422170
and 7 more
#VU125791 - Improper Check or Handling of Exceptional Conditions
CVE-2026-39304
CWE-703 Medium
No
No
9.6.25, 10.2.18, 12.1.7 10.04.2026 SB2026041072
SB2026050348
SB2026050349
and 6 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483
CWE-116 Medium
No
No
9.6.25, 10.2.18, 12.1.7 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 19 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487
CWE-532 Medium
No
No
10.2.18, 12.1.6 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 20 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880
CWE-444 Medium
No
No
9.6.25, 10.2.18, 12.1.6 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 18 more
#VU125741 - Configuration
CVE-2026-29129
CWE-16 Medium
No
No
9.6.25, 10.2.18, 12.1.7 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 12 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871
CWE-770 Medium
No
No
10.2.18, 12.1.6 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 15 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870
CWE-444 Medium
Available
No
10.2.18, 12.1.6 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more
#VU123491 - Memory corruption
CVE-2026-29062
CWE-119 Medium
No
No
12.1.7 04.03.2026 SB2026030413
SB2026060232
SB2026060234
and 3 more
#VU122999 - Improper Authorization
CVE-2026-24734
CWE-285 Medium
No
No
10.2.18, 12.1.6 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 24 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639
CWE-754 Medium
Available
No
10.2.18, 12.1.6 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 23 more
#VU121148 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-68493
CWE-611 Medium
Available
No
9.6.24, 10.2.16 12.01.2026 SB2026011214
SB2026021948
SB20260428178
#VU118877 - Resource exhaustion
CVE-2025-64775
CWE-400 Medium
No
No
9.6.21, 10.2.13, 12.1.0 01.12.2025 SB2025120157
SB2026012180
SB2026021948
and 4 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801
CWE-1321 Medium
No
No
10.2.18, 12.1.6 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more


Showing elements 21 - 40 out of 42