Skip to content
OpenAdvisories

Product · Atlassian

Crowd

13 known vulnerabilities.

Crowd at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
1
Public exploit · all time
1

1 of the exploited vulnerabilities are known to be used by ransomware (CISA).

New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Most common weaknesses

Latest advisories

  • High max 10.0
    NCSC-2024-0231 32 CVEs

    Kwetsbaarheden verholpen in Atlassian producten

    Atlassian heeft kwetsbaarheden verholpen in diverse producten, zoals Jira, Confluence en Bitbucket.

    Atlassian
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2020-36240

    The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauth…

    Atlassian Crowd
  • Unscored —
    CVE-2019-20902

    Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from befo…

    Atlassian Crowd
  • Unscored —
    CVE-2019-20104

    The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remot…

    Atlassian Crowd
  • Unscored —
    CVE-2017-18107

    Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modif…

    Atlassian Crowd
  • Unscored —
    CVE-2019-15005

    The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate …

    Atlassian Jira Server Confluence Server Crucible Web / CMS
  • Critical 9.8
    CVE-2019-11580 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Atta…

    Atlassian Crowd
    KEV Nov 3, 2021
  • Unscored —
    CVE-2017-18106

    The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an ident…

    Atlassian Crowd
  • Unscored —
    CVE-2017-18110

    The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before versio…

    Atlassian Crowd
  • Unscored —
    CVE-2017-18109

    The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allow…

    Atlassian Crowd
  • Unscored —
    CVE-2017-18105

    The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows r…

    Atlassian Crowd
  • Unscored —
    CVE-2017-18108

    The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with ad…

    Atlassian Crowd
  • Unscored —
    CVE-2018-20238

    Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote…

    Atlassian Crowd
  • Unscored —
    CVE-2017-16858

    The 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd from version 1.5.0 be…

    Atlassian Crowd