Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
atlassian bamboo 6.0.0 vulnerabilities and exploits
(subscribe to this query)
578
VMScore
CVE-2017-9514
Bamboo prior to 6.0.5, 6.1.x prior to 6.1.4, and 6.2.x prior to 6.2.1 had a REST endpoint that parsed a YAML file and did not sufficiently restrict which classes could be loaded. An attacker who can log in to Bamboo as a user is able to exploit this vulnerability to execute Java ...
Atlassian Bamboo 6.0.4
Atlassian Bamboo 6.2.0
Atlassian Bamboo 6.1.0
Atlassian Bamboo 6.1.1
Atlassian Bamboo 6.0.1
Atlassian Bamboo 6.0.3
Atlassian Bamboo 6.0.0
Atlassian Bamboo 6.0.2
578
VMScore
CVE-2017-8907
Atlassian Bamboo 5.x prior to 5.15.7 and 6.x prior to 6.0.1 did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so. An attacker who can login to Bamboo as a user without the edit permission for deployment projects...
Atlassian Bamboo 6.0.0
Atlassian Bamboo 5.15.5
Atlassian Bamboo 5.15.3
Atlassian Bamboo 5.15.4
Atlassian Bamboo 5.3
Atlassian Bamboo 5.4
Atlassian Bamboo 5.4.1
Atlassian Bamboo 5.4.2
Atlassian Bamboo 5.9.2
Atlassian Bamboo 5.9.3
Atlassian Bamboo 5.9.4
Atlassian Bamboo 5.9.7
Atlassian Bamboo 5.14.2
Atlassian Bamboo 5.14.1
Atlassian Bamboo 5.13.0
Atlassian Bamboo 5.12.5
Atlassian Bamboo 5.15.0
Atlassian Bamboo 5.0
Atlassian Bamboo 5.2
Atlassian Bamboo 5.2.2
Atlassian Bamboo 5.5
Atlassian Bamboo 5.6.1
NA
CVE-2023-52240
The Kantega SAML SSO OIDC Kerberos Single Sign-on apps prior to 6.20.0 for Atlassian products allow XSS if SAML POST Binding is enabled. This affects 4.4.2 up to and including 4.14.8 prior to 4.14.9, 5.0.0 up to and including 5.11.4 prior to 5.11.5, and 6.0.0 up to and including ...
Kantega-sso Kantega Saml Sso Oidc Kerberos Single Sign-on
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-26978
CVE-2024-26982
wireless
CVE-2023-6949
CVE-2024-26980
CVE-2024-32766
CVE-2024-26939
cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started