VulnRadar

Data against noise.

Built with NaN
Page generated: 08 Nov 2026, 10:07 UTC
← Dashboard

CVE-2019-11580

Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins…

Read full description
Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits remote code execution on systems running a vulnerable version of Crowd or Crowd Data Center. All versions of Crowd from version 2.1.0 before 3.0.5 (the fixed version for 3.0.x), from version 3.1.0 before 3.1.6 (the fixed version for 3.1.x), from version 3.2.0 before 3.2.8 (the fixed version for 3.2.x), from version 3.3.0 before 3.3.5 (the fixed version for 3.3.x), and from version 3.4.0 before 3.4.4 (the fixed version for 3.4.x) are affected by this vulnerability.
CVSS 9.8 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.9/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 9.8: +1.47
  • Fresh EPSS: 95.36%: +0.48

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 11 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

Unit 42
Press · 05 Feb 2026, 08:00 · The Shadow Campaigns: Uncovering Global Espionage - Unit 42
Recorded Future
Press · 03 Feb 2023, 08:00 · Analyze Recent Atlassian Vulnerabilities and Keep Your Infrastructure Protected - Recorded Future
The Hacker News
Press · 29 Jul 2021, 07:00 · Top 30 Critical Security Vulnerabilities Most Exploited by Hackers - The Hacker News
Qualys
Press · 28 Jul 2021, 07:00 · CISA Alert: Top Routinely Exploited Vulnerabilities - Qualys
www.trendmicro.com
Press · 28 Apr 2021, 07:00 · Manage Zero Day Exploits (ZDI) with Trend Micro Solutions - www.trendmicro.com
See all 11 source documents
Tripwire
Press · 18 Dec 2020, 08:00 · VERT Alert: SolarWinds Supply Chain Attack - Tripwire
Sophos
Press · 10 Dec 2020, 08:00 · Reassuring Sophos customers following the theft of Mandiant/FireEye tools - Sophos
BleepingComputer
Press · 20 Oct 2020, 07:00 · NSA: Top 25 vulnerabilities actively abused by Chinese hackers - BleepingComputer
Help Net Security
Press · 23 Apr 2020, 07:00 · Web shell malware continues to evade many security tools - Help Net Security
BleepingComputer
Press · 23 Apr 2020, 07:00 · NSA: Hackers exploit these vulnerabilities to deploy backdoors - BleepingComputer
Help Net Security
Press · 16 Jul 2019, 07:00 · Researcher releases PoC code for critical Atlassian Crowd RCE flaw - Help Net Security

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.9 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 9.8; EPSS 95.4%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:03.858787+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
03 Jun 2019, 13:43
First press mention
16 Jul 2019, 07:00
Added to the CISA KEV catalog
03 Nov 2021, 00:00
Latest press mention
05 Feb 2026, 08:00
Score calculated
05 Nov 2026, 13:58
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar