Atlassian Vulnerabilidad

Cronología

Escribe

Producto

Atlassian Data Center127
Atlassian JIRA Server114
Atlassian Crucible45
Atlassian JIRA40
Atlassian FishEye39

Contramedidas

Official Fix326
Temporary Fix0
Workaround0
Unavailable0
Not Defined26

Explotabilidad

High7
Functional0
Proof-of-Concept8
Unproven0
Not Defined337

Vector de acceso

Not Defined0
Physical0
Local7
Adjacent13
Network332

Autenticación

Not Defined0
High29
Low156
None167

La interacción del usuario

Not Defined0
Required81
None271

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤430
≤594
≤6106
≤749
≤843
≤920
≤109

CVSSv3 Temp

≤10
≤20
≤31
≤433
≤5106
≤6106
≤746
≤833
≤919
≤108

VulDB

≤10
≤20
≤313
≤440
≤5105
≤684
≤751
≤849
≤92
≤108

NVD

≤10
≤20
≤30
≤42
≤544
≤662
≤758
≤831
≤931
≤1025

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤70
≤86
≤99
≤106

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k92
<2k167
<5k89
<10k0
<25k0
<50k1
<100k3
≥100k0

Explotar hoy

<1k346
<2k2
<5k1
<10k0
<25k3
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (60): Activity Streams (1), Application Links (4), Assets Discovery Cloud (1), Assets Discovery Data Center (2), Atlasboard (1), Atlaskit (1), Bamboo (15), Bamboo Data Center (2), Bamboo Server (1), Bitbucket (3), Bitbucket Data Center (3), Bitbucket Server (11), Bitbucket Server and Data Center (2), Companion App (3), Confluence (13), Confluence Data Center (15), Confluence Questions (2), Confluence Server (35), Connect Express (1), Connect Spring Boot (2), Crowd (8), Crowd Data Center (2), Crowd Server (1), Crucible (45), Data Center (127), Doxygen for Atlassian Confluence (3), Eucalyptus (1), FishEye (39), Fisheye (5), Floodlight Controller (2), HipChat (1), Hipchat Server (1), JIRA (40), JIRA Core (1), JIRA Server (114), JIRA Server for Slack Plugin (1), JIRA Software (1), Jira (6), Jira Align (2), Jira Core Data Center (1), Jira Data Center (4), Jira Server (2), Jira Service Desk Data Center (3), Jira Service Desk Server (5), Jira Service Management (2), Jira Service Management Data Center (1), Jira Service Management Server (8), Jira Service Management Server and Data Center (1), Jira Software Data Center (1), Micrium uC LIB (1), Micrium uC OS (1), Navigator Links (1), OAuth Plugin (1), SourceTree (5), Universal Plugin Manager (3), User Management for Bitbucket (1), User Management for Confluence (1), atlassian-gadgets (1), gajira-comment (1), gajira-create (1)

Link to Vendor Website: https://www.atlassian.com/

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2024-04-168.88.6Atlassian Confluence Data Center System Call escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000430.26CVE-2024-21676
2024-03-197.97.7Atlassian Confluence Data Center directory traversalDesconocidoNot DefinedOfficial Fix0.000430.08CVE-2024-21677
2024-02-206.05.9Atlassian Confluence Data Center cross site scriptingDesconocidoNot DefinedOfficial Fix0.000430.04CVE-2024-21678
2024-02-207.27.0Atlassian Assets Discovery Data Center autenticación débilDesconocidoNot DefinedOfficial Fix0.000450.04CVE-2024-21682
2024-01-169.99.7Atlassian Confluence Data Center/Confluence Server Template escalada de privilegiosDesconocidoHighOfficial Fix0.965680.04CVE-2023-22527
2024-01-168.28.1Atlassian Confluence Data Center/Confluence Server escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.001730.02CVE-2024-21672
2024-01-167.17.1Atlassian Confluence Data Center/Confluence Server divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.001650.03CVE-2024-21674
2024-01-167.77.6Atlassian Confluence Data Center escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.001510.02CVE-2023-22526
2024-01-167.87.7Atlassian Confluence Data Center/Confluence Server Environment escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.001290.00CVE-2024-21673
2023-12-069.49.3Atlassian Companion App Websocket Remote Code ExecutionDesconocidoNot DefinedOfficial Fix0.002120.02CVE-2023-22524
2023-12-069.59.3Atlassian Assets Discovery Cloud Assets Discovery Agent Remote Code ExecutionCloud SoftwareNot DefinedOfficial Fix0.001040.02CVE-2023-22523
2023-12-068.48.3Atlassian Confluence Data Center/Confluence Server Template escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.001090.02CVE-2023-22522
2023-11-217.87.7Atlassian Crowd Data Center/Crowd Server Privilege EscalationDesconocidoNot DefinedOfficial Fix0.000970.02CVE-2023-22521
2023-11-218.38.2Atlassian Bamboo Data Center/Bamboo Server Privilege EscalationDesconocidoNot DefinedOfficial Fix0.000970.02CVE-2023-22516
2023-10-318.78.7Atlassian Confluence Data Center/Confluence Server escalada de privilegiosDesconocidoNot DefinedNot Defined0.964830.00CVE-2023-22518
2023-10-049.99.7Atlassian Confluence Server/Confluence Data Center Remote Code ExecutionDesconocidoNot DefinedOfficial Fix0.971960.02CVE-2023-22515
2023-09-198.38.2Atlassian Bitbucket Data Center/Bitbucket Server Privilege EscalationDesconocidoNot DefinedOfficial Fix0.000970.05CVE-2023-22513
2023-07-197.97.8Atlassian Bamboo Data Center System Call escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.001130.01CVE-2023-22506
2023-07-198.38.2Atlassian Confluence Server/Data Center Privilege EscalationDesconocidoNot DefinedOfficial Fix0.000900.05CVE-2023-22508
2023-07-197.87.7Atlassian Confluence Server/Data Center Privilege EscalationDesconocidoNot DefinedOfficial Fix0.000900.02CVE-2023-22505
2023-06-264.44.4Atlassian Jira TechTime User Management cross site scriptingBug Tracking SoftwareNot DefinedNot Defined0.000450.03CVE-2023-36662
2023-05-255.75.6Atlassian Confluence Server escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000580.04CVE-2023-22504
2023-05-025.35.2Atlassian Confluence Server/Data Center Attachment divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.000710.03CVE-2023-22503
2023-02-018.38.3Atlassian Jira Service Management Server and Data Center autenticación débilBug Tracking SoftwareNot DefinedNot Defined0.002120.03CVE-2023-22501
2022-11-178.58.4Atlassian Crowd REST API autenticación débilDesconocidoNot DefinedOfficial Fix0.001570.02CVE-2022-43782

327 no se muestran más entradas

Do you need the next level of professionalism?

Upgrade your account now!