Known Vulnerabilities for Crowd by Atlassian
Listed below are 10 of the newest known vulnerabilities associated with "Crowd" by "Atlassian".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115607 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP Tool... | Not Provided | 2026-10-28 | 2026-10-29 |
| CVE-2026-115606 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crowd Favorite DXP Tool... | Not Provided | 2026-10-28 | 2026-10-29 |
| CVE-2026-78391 json | RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view. Cryptocurrenc... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-21589 json | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software ... | Not Provided | 2026-10-05 | 2026-10-29 |
| CVE-2026-21582 json | This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in ... | Not Provided | 2026-08-18 | 2026-08-20 |
| CVE-2023-22521 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2023-11-21 | 2023-11-29 |
| CVE-2022-43782 json | Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration... | 9.8 - CRITICAL | 2022-11-17 | 2023-11-07 |
| CVE-2022-26137 json | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters ... | 8.8 - HIGH | 2022-07-20 | 2022-08-04 |
| CVE-2022-26136 json | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by fi... | 9.8 - CRITICAL | 2022-07-20 | 2022-08-04 |
| CVE-2020-36240 json | The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthentica... | 5.3 - MEDIUM | 2021-03-01 | 2021-07-21 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Atlassian | Crowd | 4.2.3 | |||
| Application | Atlassian | Crowd | 4.2.2 | |||
| Application | Atlassian | Crowd | 4.2.1 | |||
| Application | Atlassian | Crowd | 4.2.0 | |||
| Application | Atlassian | Crowd | 4.1.9 | |||
| Application | Atlassian | Crowd | 4.1.8 | |||
| Application | Atlassian | Crowd | 4.1.7 | |||
| Application | Atlassian | Crowd | 4.1.6 | |||
| Application | Atlassian | Crowd | 4.1.5 | |||
| Application | Atlassian | Crowd | 4.1.4 | |||
| Application | Atlassian | Crowd | 4.1.3 | |||
| Application | Atlassian | Crowd | 4.1.2 | |||
| Application | Atlassian | Crowd | 4.1.1 | |||
| Application | Atlassian | Crowd | 4.1.0 | |||
| Application | Atlassian | Crowd | 4.0.5 | |||
| Application | Atlassian | Crowd | 4.0.4 | |||
| Application | Atlassian | Crowd | 4.0.3 | |||
| Application | Atlassian | Crowd | 4.0.2 | |||
| Application | Atlassian | Crowd | 4.0.1 | |||
| Application | Atlassian | Crowd | 4.0.0 |