Atlassian Confluence vulnerabilities

6 published CVEs name Atlassian Confluence among the affected products; CISA lists 1 of them as exploited in the wild.

Critical 0High 1Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2019-3398
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add…
Atlassian · Confluence
ExploitedHigh8.8

CVE-2019-3398
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add…
Atlassian · Confluence
ExploitedHigh8.8
CVE-2018-13389
The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through…
Atlassian · Confluence
Medium4.7
CVE-2017-18085
The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a…
Atlassian · Confluence
Medium6.1
CVE-2017-18084
The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site…
Atlassian · Confluence
Medium4.8
CVE-2017-18083
The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site…
Atlassian · Confluence
Medium5.4
CVE-2017-16856
The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS)…
Atlassian · Confluence
Medium6.1