Crowd Data Center (Atlassian) - vulnerabilities (CVEs)

7 CVEs, 1 in the last 30 days, 4 known versions, newest CVE from 2026-10-05. Vendor: Atlassian.

CVEs of Crowd Data Center

• CVE-2026-21589 - CVSS 9.3 (critical), 2026-10-05: This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center.…
• CVE-2026-21582 - CVSS 8.8 (high), 2026-08-18: This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data…
• CVE-2026-21569 - CVSS 7.9 (high), 2026-01-28: This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. This XXE (XML External…
• CVE-2023-22521 - CVSS 8.8 (high), 2023-11-21: This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. This RCE (Remote Code Execution)…
• CVE-2022-43782 - CVSS 9.8 (critical), 2022-11-17: Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call…
• CVE-2022-26137 - CVSS 8.8 (high), 2022-07-20: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the…
• CVE-2022-26136 - CVSS 9.8 (critical), 2022-07-20: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The…