Synced 21 Oct 2026 10:38 UTC Account

Is Bamboo 2.3.1 patched?

Atlassian · cycle 2.3 · end of life · Official site ↗
2.3.10/100End of life

Current stable (12.1.12): 100/100

Minimum safe version6.3.3

2.3.1 has 7 open critical-or-high vulnerabilities. Run 6.3.3 or later to clear them. See what 6.3.3 fixes →

Health score0/100
Open issues13
Exploited now0
Cycle 2.3 EOL2011-08-11
Latest release12.1.12

Summary iPlain-English security status for Bamboo 2.3.1, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Bamboo 2.3.1 is part of the 2.3 release line. 13 known vulnerabilities affect it. The minimum safe version is 6.3.3 — upgrade to it or later to clear the open critical/high issues. The 2.3 line reached end-of-life on 2011-08-11, so it no longer receives security patches. The latest supported Bamboo release is 12.1.12.

Known issues affecting 2.3.1

Exploited first, then by exploitation probability.

CVE-2012-2926 CRITICAL EPSS 67% → fixed in 3.4.5 CVE-2016-5229 CRITICAL EPSS 7% → see advisory CVE-2015-6576 HIGH EPSS 4% → fixed in 5.9.7 CVE-2015-8360 CRITICAL EPSS 3% → see advisory CVE-2017-14589 CRITICAL EPSS 2% → fixed in 6.2.5 CVE-2019-15005 MEDIUM EPSS 1% → fixed in 6.10.2 CVE-2021-26067 MEDIUM EPSS 1% → fixed in 7.2.2 CVE-2017-18081 MEDIUM EPSS 1% → fixed in 6.3.1 CVE-2017-18042 HIGH EPSS 1% → fixed in 6.3.1 CVE-2017-18040 MEDIUM EPSS 1% → fixed in 6.2 CVE-2017-18041 MEDIUM EPSS 1% → fixed in 6.2.0 CVE-2017-18082 MEDIUM EPSS 1% → fixed in 6.2.3 CVE-2017-18080 HIGH EPSS 1% → fixed in 6.3.1

Other Bamboo versions

Check another release line of Bamboo.

Bamboo 12.1.12Bamboo 12.0.2Bamboo 11.0.8Bamboo 10.2.24Bamboo 10.1.1Bamboo 10.0.3Bamboo 9.6.27Bamboo 9.5.4Bamboo 9.4.4Bamboo 9.3.6Bamboo 9.2.24Bamboo 9.1.3Bamboo 9.0.4Bamboo 8.2.9Bamboo 8.1.12Bamboo 8.0.13Bamboo 7.2.10Bamboo 7.1.4Bamboo 7.0.6Bamboo 6.10.6Bamboo 6.9.2Bamboo 6.8.3Bamboo 6.7.3Bamboo 6.6.3Bamboo 6.5.1Bamboo 6.4.2Bamboo 6.3.4Bamboo 6.2.9Bamboo 6.1.6Bamboo 6.0.5Bamboo 5.15.7Bamboo 5.14.5Bamboo 5.13.2Bamboo 5.12.5Bamboo 5.11.4.1Bamboo 5.10.3Bamboo 5.9.10Bamboo 5.8.5Bamboo 5.7.2Bamboo 5.6.3Bamboo 5.5.1Bamboo 5.4.3Bamboo 5.3Bamboo 5.2.2Bamboo 5.1.1Bamboo 5.0.1Bamboo 4.4.8Bamboo 4.3.4Bamboo 4.2.2Bamboo 4.1.2Bamboo 4.0.1Bamboo 3.4.5Bamboo 3.3.4Bamboo 3.2.2Bamboo 3.1.4Bamboo 3.0.5Bamboo 2.7.4Bamboo 2.6.3Bamboo 2.5.5Bamboo 2.4.3Bamboo 2.2.4Bamboo 2.1.5Bamboo 2.0.6Bamboo 1.2.4Bamboo 1.1.2Bamboo 1.0.5Bamboo 0.9.1

Frequently asked

Is Bamboo 2.3.1 patched?

Bamboo 2.3.1 is end-of-life and no longer receives security patches. Move to 12.1.12.

What version should I upgrade Bamboo 2.3.1 to?

Upgrade Bamboo 2.3.1 to at least 6.3.3 to clear its 7 open critical-or-high vulnerabilities.

When does Bamboo 2.3 reach end-of-life?

Bamboo 2.3 reached end-of-life on 2011-08-11 and no longer receives security patches.

What is the latest version of Bamboo?

The latest supported Bamboo release is 12.1.12.

Is Bamboo 2.3.1 still receiving security updates?

No — Bamboo 2.3.1 is on the 2.3 line, which reached end-of-life on 2011-08-11 and no longer receives security updates. Upgrade to 12.1.12 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Atlassian's official advisory before you patch or upgrade — Bamboo official site ↗