Known vulnerabilities in Crowd Server - page 2

Vendor: Atlassian
Software: Crowd Server
Software CPE: cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*
Total vulnerabilities: 77
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Crowd Server Crowd Server is affected by 77 known vulnerabilities: 22 high, 48 medium, 7 low Critical High Medium Low

Vulnerabilities (77)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107996 - Error Handling
CVE-2025-31650
CWE-388 Medium
Available
No
6.3.1 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 38 more
#VU103770 - Improper input validation
CVE-2025-24970
CWE-20 Medium
No
No
6.2.3 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337
CWE-264 High
No
No
6.2.2 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379
CWE-264 Medium
Available
No
6.1.4, 6.2.2 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU100588 - Improper Authentication
CVE-2024-52316
CWE-287 Low
No
No
6.0.7, 6.1.4, 6.2.2 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU97652 - Resource exhaustion
CVE-2024-38286
CWE-400 Medium
No
No
5.3.5, 6.0.3 23.09.2024 SB2024092355
SB2024100267
SB2024102808
and 26 more
#VU93732 - Resource Management Errors
CVE-2024-34750
CWE-399 Medium
No
No
5.1.13, 5.2.9, 5.3.5, 6.0.3, 6.1.1 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262
CWE-918 Medium
No
No
5.1.11, 5.2.6, 5.3.3, 6.0.1 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
5.2.6 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
5.2.6 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU87615 - Resource exhaustion
CVE-2023-52428
CWE-400 Medium
No
No
6.2.3 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259
CWE-918 Medium
No
No
5.1.11, 5.2.6, 5.3.3, 6.0.1 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU87510 - Improper input validation
CVE-2024-24549
CWE-20 Medium
Available
No
5.1.9, 5.2.4 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243
CWE-918 Medium
Available
No
5.1.11, 5.2.6, 5.3.3, 6.0.1 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU80762 - Resource exhaustion
CVE-2023-41835
CWE-400 Medium
No
No
5.3.0 13.09.2023 SB2023091364
SB2023110308
SB2023113020
and 7 more
#VU77227 - Resource exhaustion
CVE-2023-34396
CWE-400 Medium
No
No
5.3.0 13.06.2023 SB2023061351
SB2023070502
SB2023071316
and 12 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
5.0.11, 5.1.9, 5.2.4 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU51876 - Resource exhaustion
CVE-2021-28165
CWE-400 Medium
No
No
5.0.11, 5.1.9, 5.2.4 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU26489 - Deserialization of Untrusted Data
CVE-2020-11112
CWE-502 High
No
No
5.0.11, 5.1.9, 5.2.4 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU26488 - Deserialization of Untrusted Data
CVE-2020-11111
CWE-502 High
No
No
5.0.11, 5.1.9, 5.2.4 31.03.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more


Showing elements 21 - 40 out of 77