CVE-2014-9757

The Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0, allows remote configured XMPP servers to execute arbitrary Java code via serialized data in an XMPP message.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
VendorProductVersion
atlassianbamboo
2.4
atlassianbamboo
2.4.1
atlassianbamboo
2.4.2
atlassianbamboo
2.4.3
atlassianbamboo
2.5
atlassianbamboo
2.5.1
atlassianbamboo
2.5.2
atlassianbamboo
2.5.3
atlassianbamboo
2.5.5
atlassianbamboo
2.6
atlassianbamboo
2.6.1
atlassianbamboo
2.6.2
atlassianbamboo
2.6.3
atlassianbamboo
2.7
atlassianbamboo
2.7.1
atlassianbamboo
2.7.2
atlassianbamboo
2.7.3
atlassianbamboo
2.7.4
atlassianbamboo
3.0
atlassianbamboo
3.0.1
atlassianbamboo
3.0.2
atlassianbamboo
3.0.3
atlassianbamboo
3.1
atlassianbamboo
3.1.1
atlassianbamboo
3.1.3
atlassianbamboo
3.1.4
atlassianbamboo
3.2
atlassianbamboo
3.2.2
atlassianbamboo
3.3
atlassianbamboo
3.3.1
atlassianbamboo
3.3.2
atlassianbamboo
3.3.3
atlassianbamboo
3.3.4
atlassianbamboo
3.4
atlassianbamboo
3.4.1
atlassianbamboo
3.4.2
atlassianbamboo
3.4.3
atlassianbamboo
3.4.4
atlassianbamboo
3.4.5
atlassianbamboo
4.0
atlassianbamboo
4.0.1
atlassianbamboo
4.1
atlassianbamboo
4.1.1
atlassianbamboo
4.1.2
atlassianbamboo
4.2
atlassianbamboo
4.2.1
atlassianbamboo
4.3
atlassianbamboo
4.3.1
atlassianbamboo
4.3.2
atlassianbamboo
4.3.3
atlassianbamboo
4.3.4
atlassianbamboo
4.4
atlassianbamboo
4.4.1
atlassianbamboo
4.4.2
atlassianbamboo
4.4.3
atlassianbamboo
4.4.4
atlassianbamboo
4.4.5
atlassianbamboo
4.4.8
atlassianbamboo
5.0
atlassianbamboo
5.0:beta1
atlassianbamboo
5.0:beta2
atlassianbamboo
5.0:beta3
atlassianbamboo
5.0:rc1
atlassianbamboo
5.0.1
atlassianbamboo
5.1
atlassianbamboo
5.1.1
atlassianbamboo
5.2
atlassianbamboo
5.2.1
atlassianbamboo
5.2.2
atlassianbamboo
5.3
atlassianbamboo
5.4
atlassianbamboo
5.4.1
atlassianbamboo
5.4.2
atlassianbamboo
5.5
atlassianbamboo
5.6
atlassianbamboo
5.6.1
atlassianbamboo
5.6.2
atlassianbamboo
5.7
atlassianbamboo
5.7.1
atlassianbamboo
5.7.2
atlassianbamboo
5.8
atlassianbamboo
5.8.1
atlassianbamboo
5.8.2
atlassianbamboo
5.8.5
atlassianbamboo
5.9
atlassianbamboo
5.9.1
atlassianbamboo
5.9.2
atlassianbamboo
5.9.3
atlassianbamboo
5.9.4
atlassianbamboo
5.9.7
𝑥
= Vulnerable software versions