Vulnerabilities fixed in Atlassian products

🗓️ 16 Jan 2024 00:00:00Reported by NCSCType

Atlassian fixes flaws in Confluence and Jira enabling forgery, DoS, circumvention, remote code execution, and data access.

Reporter	Title	Published	Views	Family All 1874
IBM Security Bulletins	Security Bulletin: Multipe vulnerabilities in DITA may affect IBM Business Automation Workflow Case Management docGenerator feature (CVE-2023-2976, CVE-2022-44729, CVE-2022-44730)	12 Dec 202309:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in snappy-java affects IBM Process Mining . CVE-2023-34453	9 Oct 202310:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in XStream	27 Feb 202103:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in XStream affect IBM Spectrum Copy Data Management	11 Dec 202100:37	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service in Logback used by Apache Zookeeper affect IBM Operations Analytics - Log Analysis (CVE-2023-6481)	28 Apr 202510:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is vulnerable to denial of service attacks due to snappy-java (CVE-2023-34453, CVE-2023-34455, CVE-2023-34454)	29 Aug 202309:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in JSON-java (CVE-2023-5072)	30 Jul 202423:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ affect IBM Robotic Process Automation.	10 Jun 202422:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for October 2023	26 Mar 202504:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs	31 Jan 202402:01	–	ibm

16 Jan 2024 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 29.3

CVSS 3.18 - 8.8

CVSS 38.6

EPSS0.85001

SSVC