Atlassian security advisories, February 2021

Every Atlassian security advisory published in February 2021, from Atlassian ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 12
Critical: 0
High: 2
In CISA KEV: 0
CVEs: 12

Atlassian advisories published in February 2021

Feb 22, 2021
High [CVE-2021-26068] endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15
High8.8
Feb 22, 2021
Medium [CVE-2020-36232] The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version…
Medium5.0
Feb 22, 2021
Medium [CVE-2020-29453] The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before…
Medium5.3
Feb 22, 2021
Medium [CVE-2020-29448] The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center before version 6.13.18, from…
Medium5.3
Feb 18, 2021
High [CVE-2020-36233] The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from…
High7.8
Feb 15, 2021
Medium [CVE-2020-29451] Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects
Medium4.3
Feb 15, 2021
Medium [CVE-2020-36237] Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options
Medium5.3
Feb 15, 2021
Medium [CVE-2020-36236] Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript
Medium6.1
Feb 15, 2021
Medium [CVE-2020-36235] Affected versions of Atlassian Jira Server and Data Center
Medium5.3
Feb 15, 2021
Medium [CVE-2020-36234] Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript
Medium4.8
Feb 2, 2021
Medium [CVE-2020-36231] Affected versions of Atlassian Jira Server and Data Center
Medium4.3
Feb 2, 2021
Medium [CVE-2020-14192] Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN
Medium4.3

Get an email when Atlassian publishes the next one.

See Atlassian's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Atlassian

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.