DoS (Denial of Service) org.apache.avro:avro Dependency in Confluence Data Center and Server

🗓️ 17 Jan 2024 06:46:26Reported by security-metrics-botType

High severity org.apache.avro:avro Dependency vulnerability introduced in Confluence Data Center and Server versions 4.1. Unauthenticated attacker can expose assets, impacting availability. Atlassian recommends upgrades for affected and fixed versions. Issue affects Java applications using Apache Avro Java SDK up to 1.11.2. Users should update to apache-avro version 1.11.3

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (March 2025)	27 Mar 202516:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.	6 Feb 202505:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Avro Java SDK affects watsonx.data	10 Feb 202510:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by Apache Avro Java SDK vulnerability	29 Nov 202304:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operations Analytics Predictive Insights.	27 Mar 202415:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	30 Jan 202404:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is vulnerable to Improper Input Validation due to Apache Avro Java SDK	4 Jul 202407:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	31 Jan 202419:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a vulnerability in a component (Apache Avro Java SDK)	6 Nov 202313:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector includes components with known vulnerabilities	11 Apr 202421:04	–	ibm