Atlassian Assets Discovery Data Center vulnerabilities

2 CVEs affecting Atlassian Assets Discovery Data Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-21682, published 2024-02-20.

More from Atlassian.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-22523, published 2023-12-06. High severity, CVSS 8.8. EPSS: 11.2% chance of exploitation in the next 30 days. This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the…
• CVE-2024-21682, published 2024-02-20. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Assets Discovery, which can be downloaded via Atlassian Marketplace, is a network scanning…