SSRF (Server-Side Request Forgery) axios Dependency in Bamboo Data Center

🗓️ 11 Jun 2026 17:30:49Reported by security-metrics-botType

High severity SSRF in Bamboo Data Center enables unauthenticated access to internal resources; upgrade to fixed versions 10.2.20 or 12.1.8.

Reporter	Title	Published	Views	Family All 320
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Axios	14 Jul 202619:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities	9 Jul 202618:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in axios (CVE-2026-44486, CVE-2026-44487)	21 Sep 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-44486, CVE-2026-44487, CVE-2026-44488, CVE-2026-44489, CVE-2026-44490, CVE-2026-44492, CVE-2026-44494, CVE-2026-44496)	24 Jul 202616:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple JavaScript Node.js vulnerabilities	10 Sep 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ REST API and Console is vulnerable to multiple security issues	14 Sep 202610:02	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	4 Sep 202622:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret	3 Aug 202611:18	–	ibm
BDU FSTEC	The vulnerability of the lib/helpers/shouldBypassProxy.js file in the axios library allows a hacker to bypass existing security restrictions.	3 Jun 202600:00	–	bdu_fstec
Atlassian	SSRF (Server-Side Request Forgery) axios Dependency in Bitbucket Data Center	11 Jun 202617:30	–	atlassian