Known vulnerabilities in Crowd Server - page 4

Vendor: Atlassian
Software: Crowd Server
Software CPE: cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*
Total vulnerabilities: 77
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Crowd Server Crowd Server is affected by 77 known vulnerabilities: 22 high, 48 medium, 7 low Critical High Medium Low

Vulnerabilities (77)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83452 - Improper input validation
CVE-2023-22521
CWE-20 Low
No
No
5.1.6, 5.2.1 23.11.2023 SB20231123109
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
5.0.8, 5.1.6, 5.2.1, 6.2.3 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635
CWE-681 Medium
No
No
5.0.8, 5.1.6, 5.2.1 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU77778 - Improper input validation
CVE-2022-29546
CWE-20 Low
No
No
5.0.8, 5.1.6, 5.2.1 28.06.2023 SB2022050443
SB20230719104
SB20231018117
and 10 more
#VU69412 - Improper Access Control
CVE-2022-43782
CWE-284 Medium
No
No
4.4.4, 5.0.3 18.11.2022 SB2022111809
#VU65499 - Improper input validation
CVE-2021-31684
CWE-20 Medium
No
No
5.0.8, 5.1.6, 5.2.1 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU65486 - Improper input validation
CVE-2022-24839
CWE-20 Medium
No
No
5.0.8, 5.1.6, 5.2.1 20.07.2022 SB2022072038
SB2022102803
SB2022102807
and 31 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649
CWE-611 Medium
No
No
5.0.8, 5.1.6, 5.2.1 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU18716 - Exposed Dangerous Method or Function
CVE-2019-11580
CWE-749 High
Available
Exploited
3.0.5, 3.1.6, 3.2.8, 3.3.5, 3.4.4 07.06.2019 SB2019060702
#VU31131 - Improper Control of Generation of Code ('Code Injection')
CVE-2017-18108
CWE-94 High
No
No
2.10.2 29.03.2019 SB2019032907
#VU31132 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-18109
CWE-601 Low
No
No
3.0.2 29.03.2019 SB2019032908
#VU31133 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-18110
CWE-611 Medium
No
No
3.0.2 29.03.2019 SB2019032908
#VU41121 - Improper Authentication
CVE-2017-18106
CWE-287 Medium
No
No
2.9.1 29.03.2019 SB2019032909
#VU31158 - Session Fixation
CVE-2018-20238
CWE-384 High
No
No
3.3.4 13.02.2019 SB2019021328
#VU31358 - Improper Authentication
CVE-2017-16858
CWE-287 Medium
No
No
3.1.2 31.01.2018 SB2018013109
#VU39994 - Improper input validation
CVE-2016-6496
CWE-20 High
No
No
- 10.12.2016 SB2016121011
#VU42759 - Improper input validation
CVE-2013-3925
CWE-20 Medium
No
No
- 02.07.2013 SB2013070203


Showing elements 61 - 80 out of 77