Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence, Atlassian Crucible, Atlassian Fisheye und Atlassian Jira ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.
[UPDATE] [hoch] Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-07-20 10:42 UTC
- Importiert: 2026-07-21 11:41 UTC
- Quelle-ID:
cert_bund - uid_hash:
443b6bc83d77ef7267daf618880988e576e029ec7afef487111b7aea138b7f32
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
CRITICAL |
9.8 |
2019-07-26 |
||||
HIGH |
HIGH |
8.3 |
2022-12-01 |
||||
HIGH |
CRITICAL |
9.8 |
2023-01-17 |
||||
HIGH |
CRITICAL |
9.8 |
2023-01-17 |
||||
HIGH |
CRITICAL |
10 |
2023-10-31 |
||||
HIGH |
CRITICAL |
9 |
2023-12-06 |
||||
HIGH |
CRITICAL |
9.8 |
2023-12-06 |
||||
HIGH |
CRITICAL |
9.6 |
2023-12-06 |
||||
HIGH |
CRITICAL |
10 |
2024-01-16 |
||||
HIGH |
2023-02-20 |
||||||
HIGH |
CRITICAL |
10 |
2023-10-27 |
||||
HIGH |
HIGH |
7.3 |
2024-09-16 |
||||
HIGH |
HIGH |
8.7 |
2025-06-25 |
||||
HIGH |
HIGH |
8.8 |
2026-03-25 |
||||
HIGH |
HIGH |
8 |
2026-01-10 |
||||
HIGH |
CRITICAL |
9.1 |
2026-03-19 |
||||
HIGH |
HIGH |
7.4 |
2026-02-17 |
||||
HIGH |
HIGH |
7.5 |
2026-04-09 |
||||
HIGH |
HIGH |
7.5 |
2026-02-09 |
||||
HIGH |
HIGH |
7.1 |
2026-02-20 |
||||
HIGH |
HIGH |
8.9 |
2026-02-25 |
||||
HIGH |
HIGH |
8.9 |
2026-02-26 |
||||
HIGH |
HIGH |
8.7 |
2026-03-06 |
||||
HIGH |
HIGH |
7.5 |
2026-04-09 |
||||
HIGH |
CRITICAL |
9.1 |
2026-04-09 |
||||
HIGH |
HIGH |
7.5 |
2026-04-09 |
||||
HIGH |
HIGH |
8.2 |
2026-03-07 |
||||
HIGH |
HIGH |
8.2 |
2026-03-09 |
||||
HIGH |
MEDIUM |
6.5 |
2026-03-27 |
||||
HIGH |
HIGH |
7.5 |
2026-04-09 |
||||
HIGH |
HIGH |
7.5 |
2026-04-09 |
||||
HIGH |
HIGH |
7.5 |
2026-04-10 |
||||
HIGH |
HIGH |
7.5 |
2026-04-29 |
||||
HIGH |
HIGH |
8.9 |
2026-04-15 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |