Known vulnerabilities in Crowd Data Center

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:crowd_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 134
Public exploits: 20
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Crowd Data Center Crowd Data Center is affected by 134 known vulnerabilities: 26 high, 98 medium, 10 low Critical High Medium Low

Vulnerabilities (134)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153326 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-21589
CWE-22 Medium
No
No
6.3.7, 7.0.3, 7.1.7, 7.2.4 06.10.2026 SB2026100635
SB2026100636
SB2026100637
and 5 more
#VU150176 - Integer overflow
CVE-2026-73086
CWE-190 Medium
No
No
7.2.2 16.09.2026 SB2026091625
SB2026091636
SB2026091637
and 3 more
#VU148867 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-67213
CWE-835 Low
No
No
7.2.3 10.09.2026 SB2026091014
SB2026091015
SB2026091640
and 1 more
#VU148866 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-67214
CWE-835 Low
No
No
7.2.3 10.09.2026 SB2026091013
SB2026091015
SB2026091640
and 2 more
#VU146453 - Improper input validation
CVE-2026-59639
CWE-20 Medium
No
No
7.2.3 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146456 - Insufficient Verification of Data Authenticity
CVE-2026-59642
CWE-345 Medium
No
No
7.2.3 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146437 - Insufficient Verification of Data Authenticity
CVE-2026-12802
CWE-345 Medium
No
No
7.2.3 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146438 - Improper Verification of Cryptographic Signature
CVE-2026-12803
CWE-347 Medium
No
No
7.2.3 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146439 - Improper Verification of Cryptographic Signature
CVE-2026-12816
CWE-347 Medium
No
No
7.2.3 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146443 - Uncontrolled Recursion
CVE-2026-13506
CWE-674 Medium
No
No
7.2.3 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146445 - Uncontrolled Memory Allocation
CVE-2026-14682
CWE-789 Medium
No
No
7.2.3 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146447 - Inefficient Algorithmic Complexity
CVE-2026-58059
CWE-407 Medium
No
No
7.2.3 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146448 - Uncontrolled Memory Allocation
CVE-2026-58060
CWE-789 Medium
No
No
7.2.3 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146413 - Allocation of Resources Without Limits or Throttling
CVE-2026-41850
CWE-770 Medium
No
No
7.2.2 31.08.2026 SB20260828154
SB2026083172
SB2026083181
and 1 more
#VU146410 - Resource exhaustion
CVE-2026-41851
CWE-400 Medium
No
No
7.2.2 31.08.2026 SB20260828154
SB2026083172
SB2026083181
and 1 more
#VU146170 - Resource exhaustion
CVE-2026-41842
CWE-400 Medium
No
No
7.2.2 28.08.2026 SB20260828154
SB2026083172
SB2026083181
and 3 more
#VU139252 - Resource exhaustion
CVE-2026-73507
CWE-400 Medium
No
No
7.2.2 24.07.2026 SB2026072404
SB2026091634
SB2026091638
and 3 more
#VU139098 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-73646
CWE-22 Medium
No
No
7.2.3 22.07.2026 SB2026072248
SB2026091634
SB2026091640
and 2 more
#VU138926 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-12143
CWE-93 High
No
No
7.2.3 21.07.2026 SB20260721116
SB2026072414
SB2026072616
and 20 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404
CWE-670 Medium
No
No
7.2.2 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 13 more


Showing elements 1 - 20 out of 134