High severity8.8NVD Advisory· Published Oct 3, 2017· Updated Jun 17, 2026

CVE-2015-6576

Description

Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Bambooinferred3 versions
>=2.2,<5.8.5 || >=5.9.0,<5.9.7+ 2 more
- (no CPE)range: >=2.2,<5.8.5 || >=5.9.0,<5.9.7
- cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*range: >=2.2,<5.8.5
- (no CPE)range: <5.8.5, <5.9.7

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/134065/Bamboo-Java-Code-Execution.htmlnvdThird Party AdvisoryVDB Entry
www.securityfocus.com/archive/1/536747/100/0/threadednvdThird Party AdvisoryVDB Entry
confluence.atlassian.com/x/Hw7RLgnvdVendor Advisory
jira.atlassian.com/browse/BAM-16439nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000