CVE-2015-8360

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0460%

EPSS Percentile32.07th

Published2016年2月8日

Last Modified2026年5月6日

Vulnerability Description

An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote attackers to execute arbitrary Java code via serialized data to the JMS port.

Affected Platforms (CPE)

📦

Atlassian

Bamboo

= 2.3.1

📦

Atlassian

Bamboo

= 2.4

📦

Atlassian

Bamboo

= 2.4.1

📦

Atlassian

Bamboo

= 2.4.2

📦

Atlassian

Bamboo

= 2.4.3

📦

Atlassian

Bamboo

= 2.5

📦

Atlassian

Bamboo

= 2.5.1

📦

Atlassian

Bamboo

= 2.5.2

📦

Atlassian

Bamboo

= 2.5.3

📦

Atlassian

Bamboo

= 2.5.5

📦

Atlassian

Bamboo

= 2.6

📦

Atlassian

Bamboo

= 2.6.1

📦

Atlassian

Bamboo

= 2.6.2

📦

Atlassian

Bamboo

= 2.6.3

📦

Atlassian

Bamboo

= 2.7

📦

Atlassian

Bamboo

= 2.7.1

📦

Atlassian

Bamboo

= 2.7.2

📦

Atlassian

Bamboo

= 2.7.3

📦

Atlassian

Bamboo

= 2.7.4

📦

Atlassian

Bamboo

= 3.0

📦

Atlassian

Bamboo

= 3.0.1

📦

Atlassian

Bamboo

= 3.0.2

📦

Atlassian

Bamboo

= 3.0.3

📦

Atlassian

Bamboo

= 3.1

📦

Atlassian

Bamboo

= 3.1.1

📦

Atlassian

Bamboo

= 3.1.3

📦

Atlassian

Bamboo

= 3.1.4

📦

Atlassian

Bamboo

= 3.2

📦

Atlassian

Bamboo

= 3.2.2

📦

Atlassian

Bamboo

= 3.3

📦

Atlassian

Bamboo

= 3.3.1

📦

Atlassian

Bamboo

= 3.3.2

📦

Atlassian

Bamboo

= 3.3.3

📦

Atlassian

Bamboo

= 3.3.4

📦

Atlassian

Bamboo

= 3.4

📦

Atlassian

Bamboo

= 3.4.1

📦

Atlassian

Bamboo

= 3.4.2

📦

Atlassian

Bamboo

= 3.4.3

📦

Atlassian

Bamboo

= 3.4.4

📦

Atlassian

Bamboo

= 3.4.5

📦

Atlassian

Bamboo

= 4.0

📦

Atlassian

Bamboo

= 4.0.1

📦

Atlassian

Bamboo

= 4.1

📦

Atlassian

Bamboo

= 4.1.1

📦

Atlassian

Bamboo

= 4.1.2

📦

Atlassian

Bamboo

= 4.2

📦

Atlassian

Bamboo

= 4.2.1

📦

Atlassian

Bamboo

= 4.3

📦

Atlassian

Bamboo

= 4.3.1

📦

Atlassian

Bamboo

= 4.3.2

📦

Atlassian

Bamboo

= 4.3.3

📦

Atlassian

Bamboo

= 4.3.4

📦

Atlassian

Bamboo

= 4.4

📦

Atlassian

Bamboo

= 4.4.1

📦

Atlassian

Bamboo

= 4.4.2

📦

Atlassian

Bamboo

= 4.4.3

📦

Atlassian

Bamboo

= 4.4.4

📦

Atlassian

Bamboo

= 4.4.5

📦

Atlassian

Bamboo

= 4.4.8

📦

Atlassian

Bamboo

= 5.0

📦

Atlassian

Bamboo

= 5.0

📦

Atlassian

Bamboo

= 5.0

📦

Atlassian

Bamboo

= 5.0

📦

Atlassian

Bamboo

= 5.0

📦

Atlassian

Bamboo

= 5.0.1

📦

Atlassian

Bamboo

= 5.1

📦

Atlassian

Bamboo

= 5.1.1

📦

Atlassian

Bamboo

= 5.2

📦

Atlassian

Bamboo

= 5.2.1

📦

Atlassian

Bamboo

= 5.2.2

📦

Atlassian

Bamboo

= 5.3

📦

Atlassian

Bamboo

= 5.4

📦

Atlassian

Bamboo

= 5.4.1

📦

Atlassian

Bamboo

= 5.4.2

📦

Atlassian

Bamboo

= 5.5

📦

Atlassian

Bamboo

= 5.6

📦

Atlassian

Bamboo

= 5.6.1

📦

Atlassian

Bamboo

= 5.6.2

📦

Atlassian

Bamboo

= 5.7

📦

Atlassian

Bamboo

= 5.7.1

📦

Atlassian

Bamboo

= 5.7.2

📦

Atlassian

Bamboo

= 5.8

📦

Atlassian

Bamboo

= 5.8.1

📦

Atlassian

Bamboo

= 5.8.2

📦

Atlassian

Bamboo

= 5.8.5

📦

Atlassian

Bamboo

= 5.9

📦

Atlassian

Bamboo

= 5.9.1

📦

Atlassian

Bamboo

= 5.9.2

📦

Atlassian

Bamboo

= 5.9.3

📦

Atlassian

Bamboo

= 5.9.4

📦

Atlassian

Bamboo

= 5.9.7

References & Advisories

🔗 http://packetstormsecurity.com/files/135352/Bamboo-Deserialization-Missing-Authentication-Checks.html

🔗 http://www.securityfocus.com/archive/1/537347/100/0/threaded

🔗 https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-01-20-794376535.html

🔗 https://jira.atlassian.com/browse/BAM-17101

🔗 http://packetstormsecurity.com/files/135352/Bamboo-Deserialization-Missing-Authentication-Checks.html

🔗 http://www.securityfocus.com/archive/1/537347/100/0/threaded

🔗 https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-01-20-794376535.html

🔗 https://jira.atlassian.com/browse/BAM-17101