Skip to contentAtlassian Confluence vulnerabilities
- atlassian confluence, confluence server and data center, confluence server +2 moreConfluence Server and Data Center had a path traversal vulnerability in the...CVE-2019-3398In KEVPublic exploitEPSS 97.0%8.8 High
- atlassian confluence server, confluence server and data server +1 moreThe Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed...CVE-2019-3396In KEVPublic exploitEPSS 99.9%9.8 Critical
- atlassian confluence, confluence server +1 moreThe WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the...CVE-2019-33959.8 Critical
- atlassian confluence server, confluence data center +1 moreAtlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to...CVE-2018-202376.5 Medium
- atlassian confluence questions, questions for confluence +1 moreThe acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled...CVE-2018-133946.5 Medium
- atlassian confluence questions, questions for confluence +1 moreThe convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the...CVE-2018-133936.5 Medium
- atlassian confluenceThe attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to...CVE-2018-133894.7 Medium
- atlassian confluenceVarious resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to...CVE-2017-180866.1 Medium
- atlassian confluenceThe viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows...CVE-2017-180856.1 Medium
- atlassian confluenceThe usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote...CVE-2017-180844.8 Medium
- atlassian confluenceThe editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote...CVE-2017-180835.4 Medium
- atlassian confluenceThe RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject...CVE-2017-168566.1 Medium
- atlassian confluence, confluence server +1 moreAtlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to...CVE-2017-95054.3 Medium
- atlassian confluence serverAtlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read...CVE-2017-74157.5 High
- atlassian confluenceAtlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.CVE-2016-43175.4 Medium
- atlassian confluence server, jira integration for hipchat +1 moreThe Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before...CVE-2016-66687.5 High
- atlassian confluenceCross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote...CVE-2016-6283Public exploit6.1 Medium
- atlassian confluenceAtlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files...CVE-2015-8399Public exploitEPSS 60.2%4.3 Medium
- atlassian confluenceCross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote...CVE-2015-8398Public exploit6.1 Medium
- atlassian confluence serverCross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6...CVE-2012-63426.8 Medium
- atlassian jira, gliffy, atlassian confluence server +2 moreThe Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does...CVE-2012-29286.4 Medium
- atlassian bamboo, confluence, crowd +4 more +6 moreAtlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10;...CVE-2012-2926Public exploitEPSS 66.3%9.1 Critical
- atlassian confluenceCross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian...CVE-2005-39674.3 Medium