Known vulnerabilities in Crucible Data Center

Vendor: Atlassian
Software: Crucible Data Center
Software CPE: cpe:2.3:a:atlassian:crucible_data_center:*:*:*:*:*:*:*:*
Website: https://www.atlassian.com
Total vulnerabilities: 34
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Crucible Data Center Crucible Data Center is affected by 34 known vulnerabilities: 4 high, 27 medium, 3 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153326 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-21589		 CWE-22 Medium
No
No
 4.9.15 06.10.2026 SB2026100635
SB2026100636
SB2026100637
and 5 more
#VU150179 - Allocation of Resources Without Limits or Throttling
CVE-2026-75140		 CWE-770 Medium
No
No
 4.9.14 16.09.2026 SB2026091630
SB2026091639
SB2026092311
and 1 more
#VU150178 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-55153		 CWE-470 Low
No
No
 4.9.14 16.09.2026 SB2026091629
SB2026091635
SB2026091639
#VU146453 - Improper input validation
CVE-2026-59639		 CWE-20 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146456 - Insufficient Verification of Data Authenticity
CVE-2026-59642		 CWE-345 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146464 - Improper input validation
CVE-2026-59650		 CWE-20 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 7 more
#VU146435 - Improper Certificate Validation
CVE-2026-8763		 CWE-295 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 8 more
#VU146437 - Insufficient Verification of Data Authenticity
CVE-2026-12802		 CWE-345 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146438 - Improper Verification of Cryptographic Signature
CVE-2026-12803		 CWE-347 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146439 - Improper Verification of Cryptographic Signature
CVE-2026-12816		 CWE-347 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146443 - Uncontrolled Recursion
CVE-2026-13506		 CWE-674 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146445 - Uncontrolled Memory Allocation
CVE-2026-14682		 CWE-789 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146447 - Inefficient Algorithmic Complexity
CVE-2026-58059		 CWE-407 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146448 - Uncontrolled Memory Allocation
CVE-2026-58060		 CWE-789 Medium
No
No
 4.9.14 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU145265 - Allocation of Resources Without Limits or Throttling
CVE-2026-54428		 CWE-770 Medium
No
No
 4.9.14 25.08.2026 SB2026082579
SB2026091639
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 4.9.13 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 36 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513		 CWE-184 High
No
No
 4.9.13 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU137397 - Improper Handling of Alternate Encoding
CVE-2026-10050		 CWE-173 High
No
No
 4.9.13 13.07.2026 SB2026071348
SB2026081819
SB2026083180
and 2 more
#VU135919 - Selection of Less-Secure Algorithm During Negotiat
CVE-2026-54291		 CWE-757 Medium
No
No
 4.9.12 30.06.2026 SB2026063034
SB2026073042
SB2026080425
and 7 more
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332		 CWE-444 Medium
No
No
 4.9.13 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 13 more


Showing elements 1 - 20 out of 34