CVE-2015-6576

CWE-94 — Code Injection3 documents3 sources
Severity
8.8HIGH
EPSS
2.3%
top 15.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Atlassian Bamboo
Timeline
PublishedOct 3
Latest updateMay 14

Description

Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDatlassian/bamboo2.2 — 5.8.5+1

🔴Vulnerability Details

2
GHSA
GHSA-wq88-7mxf-ggcp: Bamboo 2↗2022-05-14
▶
CVEList
CVE-2015-6576: Bamboo 2↗2017-10-02
▶
CVE-2015-6576 (HIGH CVSS 8.8) | Bamboo 2.2 before 5.8.5 and 5.9.x b | cvebase.io