Lucene search
+L

4004 matches found

Atlassian
Atlassian
added 2023/10/04 7:45 p.m.47 views

hutool-json Vulnerability in Bitbucket Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 7.17.0, 7.21.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, and 8.12.0 of Bitbucket Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

7.5CVSS7.1AI score0.01181EPSS
SaveExploits5
ATTACKERKB
ATTACKERKB
added 2023/10/04 2:15 p.m.48 views

CVE-2023-22515

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access...

10CVSS7.3AI score0.99999EPSS
SaveIn wildExploits48References10Affected Software2
OSV
OSV
added 2023/10/04 2:15 p.m.7 views

CVE-2023-22515

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access...

9.8CVSS5.5AI score0.99156EPSS
SaveExploits39References5
CVE
CVE
added 2023/10/04 2:0 p.m.925 views

CVE-2023-22515

CVE-2023-22515 affects Atlassian Confluence Data Center and Server. The issue is a broken access control vulnerability that enables an unauthenticated attacker to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian Cloud sites are not affected, and ins...

10CVSS7.4AI score0.99156EPSS
SaveIn wildExploits39References5Affected Software2
Vulnrichment
Vulnrichment
added 2023/10/04 2:0 p.m.25 views

CVE-2023-22515

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access...

10CVSS8.8AI score0.99156EPSS
SaveExploits39References4
CNNVD
CNNVD
added 2023/10/04 12:0 a.m.10 views

Atlassian Confluence Server Security Vulnerability

Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. A security vulnerability exists in Atlassian Confluence Server that stems from an unknown...

10CVSS6.6AI score0.99156EPSS
SaveExploits39References11
VulnCheck KEV
VulnCheck KEV
added 2023/10/04 12:0 a.m.5 views

VulnCheck KEV: CVE-2023-22515

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence...

10CVSS7.4AI score0.99156EPSS
SaveExploits39References1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.8 views

The vulnerability of the Git Bitbucket Server and Data Center-based code deployment, management, and collaboration tools lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Git Bitbucket Server and Data Center-based code deployment, management, and collaboration tools is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.2AI score0.14329EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.8 views

The vulnerability of the monitoring system for critical equipment, StruxureWare Data Center Expert, arises from improper code generation. This allows a perpetrator to execute arbitrary code.

The vulnerability of the StruxureWare Data Center Expert monitoring system relates to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.6AI score0.0086EPSS
SaveExploits0References2Affected Software1
Atlassian
Atlassian
added 2023/09/26 4:17 p.m.44 views

DoS (Denial of Service) org.eclipse.jetty:jetty-io in Jira Software Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 8.20.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.10.1, and 9.11.0 of Jira Software Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

7.8CVSS6.6AI score0.53861EPSS
SaveExploits1
Atlassian
Atlassian
added 2023/09/26 4:16 p.m.48 views

Info Disclosure org.eclipse.jetty:jetty-util in Jira Software Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 8.20.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.10.1, and 9.11.0 of Jira Software Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

7.5CVSS9.3AI score0.05795EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.9 views

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to errors in access management, allows a perpetrator to trigger a service failure.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to errors in access management. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS5.5AI score0.13734EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2023/09/20 12:0 a.m.8 views

Atlassian Confluence Data Center and Server Security Vulnerability

Atlassian Confluence Data Center and Server is a data center of Atlassian Australia. A security vulnerability exists in Atlassian Confluence Data Center and Server. An attacker exploiting this vulnerability could cause resources to become unavailable to their intended users by temporarily or...

7.5CVSS6.6AI score0.13734EPSS
SaveExploits0References5
NVD
NVD
added 2023/09/19 5:15 p.m.27 views

CVE-2023-22513

This High severity RCE Remote Code Execution vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.5, allows an authenticated attacker to execute arbitrary code which has high impact to...

8.8CVSS8.7AI score0.14329EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/19 5:15 p.m.5 views

CVE-2023-22513

This High severity RCE Remote Code Execution vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.5, allows an authenticated attacker to execute arbitrary code which has high impact to...

8.8CVSS7.8AI score0.14329EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/19 5:15 p.m.25 views

Remote code execution

This High severity RCE Remote Code Execution vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.5, allows an authenticated attacker to execute arbitrary code which has high impact to...

4.6CVSS8.8AI score0.14329EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2023/09/19 5:0 p.m.25 views

CVE-2023-22513

This High severity RCE Remote Code Execution vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.5, allows an authenticated attacker to execute arbitrary code which has high impact to...

8.5CVSS9AI score0.14329EPSS
SaveExploits0References2
CVE
CVE
added 2023/09/19 5:0 p.m.113 views

CVE-2023-22513

CVE-2023-22513 is a high-severity remote code execution vulnerability in Bitbucket Data Center/Server, introduced in v8.0.0. An authenticated attacker can execute arbitrary code with high impact on confidentiality, integrity, and availability, with no user interaction. Fixed versions are specifie...

8.8CVSS8AI score0.14329EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2023/09/19 12:0 a.m.10 views

Bitbucket Data Center and Server Security Vulnerability

Bitbucket Data Center and Server is a data management center from Bitbucket, Inc. A security vulnerability exists in Bitbucket Data Center and Server version 8.0.0. An attacker can exploit the vulnerability to execute arbitrary code...

8.8CVSS7.3AI score0.14329EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/09/19 12:0 a.m.5 views

PT-2023-5577 · Atlassian · Bitbucket Data Center/Server +1

Name of the Vulnerable Software and Affected Versions: Bitbucket Data Center and Server versions 8.0.0 through 8.9.4 Bitbucket Data Center and Server versions 8.10.0 through 8.10.4 Bitbucket Data Center and Server versions 8.11.0 through 8.11.3 Bitbucket Data Center and Server versions 8.12.0...

9CVSS8.6AI score0.14329EPSS
SaveExploits0References24
Rows per page
Query Builder