CVEs published in February 2022
18 tracked CVEs from 5 vendors had their first vendor advisory published in February 2022: 5 critical, 3 high, 2 in CISA KEV. Newest first.
4 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2021-43945Medium
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-34361Medium
QTS: cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server.
QNAP · 1 advisory - Added
CVE-2021-34359Medium
QTS: cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server.
QNAP · 1 advisory - Added
CVE-2021-43943Medium
Affected versions of Atlassian Jira Service Management Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-42554High
InsydeH2O Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2021-43948Medium
Affected versions of Atlassian Jira Service Management Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-43941Medium
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-43940High
Affected versions of Atlassian Confluence Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-43953Medium
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-43950Medium
Affected versions of Atlassian Jira Service Management Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-43952Medium
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-38679Medium
QNAP NAS: improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server.
QNAP · 1 advisory - Added
CVE-2022-0366High
authenticated and authorized agent user could potentially gain administrative access
Sophos · 1 advisory - Added
CVE-2021-45105Critical
Commvault · 1 advisory - Added
CVE-2021-45046CriticalCISA KEV
Apache Log4j2 Deserialization of Untrusted Data Vulnerability
Commvault · 1 advisory - Added
CVE-2021-44832Critical
Commvault · 1 advisory - Added
CVE-2021-44228CriticalCISA KEV
Apache Log4j2 Remote Code Execution Vulnerability
Commvault · 1 advisory - Added
CVE-2021-4104Critical
Commvault · 1 advisory