CVE-2016-6496

Description

References

• securityfocus.com/archive/1/539655/100/0/threaded
• securityfocus.com/bid/93826 · Third Party Advisory
• confluence.atlassian.com/crowd/crowd-security-advisory-2016-10-19-856697283.html · Vendor Advisory
• jira.atlassian.com/browse/CWD-4790 · Issue Tracking
• blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE-wp.pdf · Not Applicable

Autres vulnérabilités de crowd

• CVE-2026-21589ÉLEVÉE 7.5EXPLOITED (CISA KEV)This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Ba…
• CVE-2026-21569ÉLEVÉE 7.9This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. Th…
• CVE-2023-22521ÉLEVÉE 8.8This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. This RCE (R…
• CVE-2022-43782CRITIQUE 9.8Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent…
• CVE-2022-26137ÉLEVÉE 8.8A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked w…