bitvoodoo Advisories
Space shortcuts
Space Tools
bitvoodoo Advisories BVADVIS

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 12 Next »

Atlassian

TitleDateVulnerabilityProduct
February 2025 Security Bulletin - Confluence and Crowd

 

Critical

Confluence Data Center and Server

Crowd Data Center and Server

RCE Vulnerability in Out-of-Date Versions of Confluence Data Center and Server

 

critical

  • Confluence Data Center

  • Confluence Server

RCE Vulnerabilities Identified in Multiple Products 2023-12-06

 

Critical

Atlassian Server and Data Center

  • Confluence Data Center and Server
  • Jira Software Data Center and Server
  • Jira Service Management Data Center and Server
  • Jira Core Data Center and Server
  • Bitbucket Data Center and Server

Atlassian Server and Data Center 3rd-party Apps

  • Confluence Cloud Migration App (CCMA)

  • Automation for Jira (A4J) app (including Server Lite edition)

  • Assets Discovery (stand-alone app)

Atlassian Cloud

  • Assets Discovery (stand-alone app)

Improper Authorization Vulnerability In Confluence Data Center and Confluence Server

 

critical

Confluence Server and Data Center

XXE (XML External Entity Injection) Vulnerability In Jira Service Management Data Center and Jira Service Management Server

 

high (8.4)

  • Jira Service Management Data Center
  • Jira Service Management Server
Confluence Security Advisory 2023-10-04 - Privilege Escalation Vulnerability

 

Critical

Confluence Data Center and Server

(info) Atlassian Cloud Instances are not affected

Multiple Products Security Advisory 2023-02-15

 

Critical

  • Bitbucket Server and Data Center

  • Bamboo Server and Data Center

  • Fisheye

  • Crucible

  • Sourcetree

(info) Atlassian Cloud sites are not affected.

Jira Service Management Server and Data Center Security Advisory 2023-02-01

 

Critical

  • Jira Service Management Server

  • Jira Service Management Data Center

Bitbucket Server and Data Center Security Advisory 2022-08-24

 

Critical

  • Bitbucket Server

  • Bitbucket Data Center

Multiple Products Security Advisory 2022-07-20

 

Critical

  • Bamboo Server and Data Center

  • Bitbucket Server and Data Center

  • Confluence Server and Data Center

  • Crowd Server and Data Center

  • Fisheye and Crucible

  • Jira Server and Data Center

  • Jira Service Management Server and Data Center

3rd party vendors

TitleDateVulnerabilityBase product
Kantega SSO Enterprise - 2023-11-08

 

CriticalJira / Confluence / Bitbucket / Bamboo
Capture for Jira - 2021-12-20

 

CriticalJira
Zephyr Squad - 2021-12-20

 

CriticalJira
PTC & STC Insight Extension - 2021-12-20

 

CriticalConfluence
Linchpin Intranet Suite & Linchpin Essentials - 2021-09-09

 

HighConfluence
SAML Single Sign On (by resolution) - 2021-08-12

  

CriticalJira, Confluence, Bitbucket, Bamboo, Fisheye
SAML Single Sign On (by resolution) - 2021-07-29

  

CriticalJira, Confluence, Bitbucket, Bamboo, Fisheye
Jira Server for Slack (Official) - 2021-02-17

 

CriticalJira
Metadata for Confluence - 2020-11-19

 

MediumConfluence
Email This Issue - 2020-02-18

 

CriticalJira

Other

TitleDateVulnerabilityBase product
Log4Shell - bitvoodoo Security Advisory - 2021-12-13

 

Critical

 
Log4Shell - bitvoodoo apps - 2021-12-13

 

Not applicable  

  • No labels
bitvoodoo Advisories BVADVIS