1855 matches found
Description of the security update for SharePoint Server 2019: November 12, 2024 (KB5002650)
None None...
Description of the security update for SharePoint Server Subscription Edition: November 12, 2024 (KB5002651)
None None...
KB5046861 - Description of the security update for SQL Server 2022 GDR: November 12, 2024
None None...
Description of the security update for Microsoft Exchange Server 2019 and 2016: November 12, 2024 (KB5044062)
None None...
XSS (Cross Site Scripting) DOMPurify Dependency in Jira Core Data Center and Server
|Please see our updated fixed version guidance for this CVE, as the fix issued in our November 2024 Security Bulletin was incomplete. This vulnerability has now been mitigated in Jira Software and the correct fixed versions have been added to this ticket. We apologize for any inconvenience our...
Path Traversal org.springframework:spring-webmvc Dependency in Confluence Data Center and Server
This High severity org.springframework:spring-webmvc Dependency vulnerability was introduced in versions 3.0 of Confluence Data Center and Server. This org.springframework:spring-webmvc Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Confluence Data Center and Server
This High severity org.apache.tomcat:tomcat-coyote Dependency vulnerability was introduced in versions 6.5 of Confluence Data Center and Server. This org.apache.tomcat:tomcat-coyote Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:...
RCE (Remote Code Execution) org.apache.avro:avro Dependency in Bamboo Data Center and Server
This High severity org.apache.avro:avro Dependency vulnerability was introduced in versions 9.2.1, 9.6.0, and 10.0.0-rc3 of Bamboo Data Center and Server. This org.apache.avro:avro Dependency vulnerability, with a CVSS Score of 7.3 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L...
DoS (Denial of Service) com.nimbusds:nimbus-jose-jwt Dependency in Jira Service Management Data Center and Server
This High severity com.nimbusds:nimbus-jose-jwt Dependency vulnerability was introduced in versions 5.1.0, 5.2.0, 5.3.0, 5.4.0, 5.5.0, 5.6.0, 5.7.0, 5.8.0, 5.9.0, 5.10.0, 5.11.0, 5.12.0, 5.13.0 and 5.14.0 of Jira Service Management Data Center and Server. This com.nimbusds:nimbus-jose-jwt...
Stored XSS in Confluence Data Center and Server
This High severity Stored XSS vulnerability was introduced in version 3.0 of Confluence Data Center and Server. This Stored XSS vulnerability, with a CVSS Score of 8.1, allows an authenticated attacker to execute arbitrary HTML or JavaScript code on a victims browser which has high impact to...
Bundled JRE Dependency in Bitbucket Data Center and Server
This High severity Third-Party Dependency vulnerability was introduced in versions 8.9.0, 8.19.0, and 9.2.0 of Bitbucket Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to expose assets in your environment susceptible...
Description of the security update for Office 2016: October 8, 2024 (KB5002635)
None None...
Description of the security update for SharePoint Enterprise Server 2016: October 8, 2024 (KB5002645)
None None...
Description of the security update for SharePoint Server Subscription Edition: October 8, 2024 (KB5002649)
None None...
October 1, 2024, update for Project 2016 (KB5002638)
None None...
BASM (Broken Authentication & Session Management) browserify-sign Dependency in Confluence Data Center
This High severity BASM Broken Authentication & Session Management vulnerability was introduced in version 7.11 of Confluence Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.5, allows an unauthenticated attacker to exploit a cryptographic...
KB5046060 - Description of the security update for SQL Server 2019 CU28: October 8, 2024
None None...
KB5046059 - Description of the security update for SQL Server 2022 CU15: October 8, 2024
None None...