Known vulnerabilities in Crowd Server 6.3.6

Vendor: Atlassian
Software: Crowd Server
Version: 6.3.6
Software CPE: cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Crowd Server version 6.3.6 Crowd Server 6.3.6 is affected by 1 vulnerabilities: 1 medium Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153326 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-21589
CWE-22 Medium
No
No
6.3.7, 7.0.3, 7.1.7, 7.2.4 06.10.2026 SB2026100635
SB2026100636
SB2026100637
and 5 more