Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
[UPDATE] [hoch] Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-09-24 10:45 UTC
- Importiert: 2026-09-28 08:22 UTC
- CVSS: 9.8
- Quelle-ID:
cert_bund - uid_hash:
1620df49e5a8b6f83ae0d0d72f3cb517727224f24fa88eed69db3bc5390286e7
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.8 |
2019-06-26 |
|||||
CRITICAL |
9.8 |
HIGH |
7.5 |
2021-09-17 |
|||
CRITICAL |
9.8 |
HIGH |
8.3 |
2022-12-01 |
|||
CRITICAL |
9.8 |
CRITICAL |
9.8 |
2022-04-01 |
|||
CRITICAL |
9.8 |
2022-05-19 |
|||||
CRITICAL |
9.8 |
CRITICAL |
9.8 |
2022-10-31 |
|||
CRITICAL |
9.8 |
HIGH |
8.2 |
2024-03-18 |
|||
CRITICAL |
9.8 |
HIGH |
7.4 |
2025-03-20 |
|||
CRITICAL |
9.8 |
CRITICAL |
9.1 |
2026-03-19 |
|||
CRITICAL |
9.8 |
HIGH |
7.4 |
2026-02-17 |
|||
CRITICAL |
9.8 |
HIGH |
8.7 |
2026-02-20 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-02-26 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-02-26 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-04-09 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-03-27 |
|||
CRITICAL |
9.8 |
HIGH |
8.7 |
2026-03-27 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-06-02 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-04-09 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-04-09 |
|||
CRITICAL |
9.8 |
HIGH |
8.1 |
2026-04-10 |
|||
CRITICAL |
9.8 |
HIGH |
8.8 |
2026-04-24 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-05-12 |
|||
CRITICAL |
9.8 |
CRITICAL |
9.8 |
2026-05-12 |
|||
CRITICAL |
9.8 |
HIGH |
7.4 |
2026-04-24 |
|||
CRITICAL |
9.8 |
HIGH |
7.4 |
2026-04-24 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.8 |
2026-04-24 |
|||
CRITICAL |
9.8 |
HIGH |
7.2 |
2026-04-24 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-04-29 |
|||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
HIGH |
7.4 |
2026-05-08 |
|||
CRITICAL |
9.8 |
||||||
CRITICAL |
9.8 |
HIGH |
7.3 |
2026-05-12 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-05-13 |
|||
CRITICAL |
9.8 |
HIGH |
7.2 |
2026-05-13 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-05-13 |
|||
CRITICAL |
9.8 |
HIGH |
7.3 |
2026-05-13 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-05-13 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-05-13 |
|||
CRITICAL |
9.8 |
CRITICAL |
9.8 |
2026-05-12 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-05-12 |
|||
CRITICAL |
9.8 |
CRITICAL |
9.1 |
2026-05-12 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-06-11 |
|||
CRITICAL |
9.8 |
HIGH |
8.2 |
2026-06-11 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-06-11 |
|||
CRITICAL |
9.8 |
HIGH |
8.6 |
2026-06-11 |
|||
CRITICAL |
9.8 |
HIGH |
7 |
2026-06-11 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-06-11 |
|||
CRITICAL |
9.8 |
MEDIUM |
6.5 |
2026-05-29 |
|||
CRITICAL |
9.8 |
HIGH |
7.5 |
2026-05-15 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
Oracle Linux Security Advisory ELSA-2026-47058 vom 2026-08-01 |
EXTERNAL | - | wid_csaf |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |