Atlassian security advisories, October 2021

Every Atlassian security advisory published in October 2021, from Atlassian ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 7
Critical: 0
High: 3
In CISA KEV: 0
CVEs: 7

Atlassian advisories published in October 2021

Oct 26, 2021
High [CVE-2021-41307] Affected versions of Atlassian Jira Server and Data Center
High7.5
Oct 26, 2021
High [CVE-2021-41306] Affected versions of Atlassian Jira Server and Data Center
High7.5
Oct 26, 2021
High [CVE-2021-41305] Affected versions of Atlassian Jira Server and Data Center
High7.5
Oct 26, 2021
Medium [CVE-2021-41308] Affected versions of Atlassian Jira Server and Data Center
Medium6.5
Oct 26, 2021
Medium [CVE-2021-41304] Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript
Medium6.1
Oct 21, 2021
Medium [CVE-2021-39127] Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL endpoint
Medium5.3
Oct 21, 2021
Medium [CVE-2021-39126] Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources
Medium6.5

Get an email when Atlassian publishes the next one.

See Atlassian's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Atlassian

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.