Atlassian Confluence vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
61 matching records
- Medium6.1The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site s…Check if you run itEPSS 0.81%Feb 2, 2018
- Medium4.8The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (…Check if you run itEPSS 0.60%Feb 2, 2018
- Medium5.4The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (…Check if you run itEPSS 0.58%Feb 2, 2018
- Medium6.1The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabi…Check if you run itEPSS 0.81%Dec 5, 2017
- Medium4.3Atlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to view a page when creating a workbox notification about new comments.Check if you run itEPSS 1.26%Jun 15, 2017
- Medium5.4Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.Check if you run itEPSS 0.71%Apr 10, 2017
- Medium6.1Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName param…Check if you run itEPSS 3.17%Jan 18, 2017
- Medium4.3Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.act…Check this weekEPSS 60.24%Apr 11, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest…Check if you run itEPSS 2.05%Apr 11, 2016
- Critical9.1Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7…Check this weekEPSS 66.26%May 22, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web scri…Check if you run itEPSS 1.21%Dec 3, 2005