DeutschShown in its original language — a full translation is planned for a future version.
Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management: Mehrere Schwachstellen
view advisory published 2026-09-15
Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, serverseitige Request-Forgery-Angriffe (SSRF) durchzuführen, Cross-Site-Scripting-Angriffe zu starten, sensible Informationen offenzulegen, Daten zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.
01
describes (64)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-68763US | — | — | ||
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset
This issue affects Apache Tomcat: f… | ||||
| CVE-2026-76172US | — | — | ||
fast-uri is a URI parser for Node.js. During parsing it runs a legacy decoding pass over the scheme component and never re-escapes the result, and serialization writes the scheme b… | ||||
| CVE-2026-75975US | — | — | ||
fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be sil… | ||||
| CVE-2026-75899US | — | — | ||
fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so… | ||||
| CVE-2026-75140US | — | — | ||
jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory… | ||||
| CVE-2026-75595US | critical9.1 | — | ||
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong off… | ||||
| CVE-2026-21582US | — | — | ||
This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center.
This BASM (Broke… | ||||
| CVE-2026-73646US | — | — | ||
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap()… | ||||
| CVE-2026-73566US | — | — | ||
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path up… | ||||
| CVE-2026-73507US | — | — | ||
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.xml.XmlFrameDecoder.decode() failed to preserv… | ||||
| CVE-2026-73089US | — | — | ||
Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct `(queries, context)`… | ||||
| CVE-2026-73088US | — | — | ||
Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats() in node.js, reached unconditionally… | ||||
| CVE-2026-73086US | — | — | ||
nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the us… | ||||
| CVE-2026-69152US | — | — | ||
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while con… | ||||
| CVE-2026-14682US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12,… | ||||
| CVE-2026-13506US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle… | ||||
| CVE-2026-12816US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | ||||
| CVE-2026-12803US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS bef… | ||||
| CVE-2026-12802US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bounc… | ||||
| CVE-2026-58060US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12,… | ||||
showing 20 of 64
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:63307 vom 2026-10-02external
- Red Hat Security Advisory RHSA-2026:67858 vom 2026-09-25external
- Red Hat Security Advisory RHSA-2026:68006 vom 2026-09-16external
- Red Hat Security Advisory RHSA-2026:68044 vom 2026-09-16external
- Red Hat Security Advisory RHSA-2026:68253 vom 2026-09-16external
- Red Hat Security Advisory RHSA-2026:68254 vom 2026-09-16external
- Red Hat Security Advisory RHSA-2026:68747 vom 2026-09-18external
- Red Hat Security Advisory RHSA-2026:68748 vom 2026-09-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan