Atlassian Confluence Data Center vulnerabilities, page 3
45 vulnerabilities
Known vulnerabilities in Atlassian Confluence Data Center, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2020-14175atlassian · confluence_server +1 moreatlassian confluence_serverAffected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2.CVSS5.4MediumEPSS1.15%RoutineCVE-2020-4027atlassian · confluence_data_center +2 moreatlassian confluence_data_centerAffected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1.CVSS6.5MediumEPSS1.52%RoutineCVE-2019-20406atlassian · confluence_data_center +2 moreatlassian confluence_data_centerThe usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a DLL file in a directory in the global path environmental variable variable to inject code & escalate their privileges via a DLL hijacking vulnerability.CVSS7.8HighEPSS0.48%RoutineCVE-2018-20239atlassian · atlassian application links +8 moreatlassian atlassian application linksApplication Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the applinkStartingUrl parameter. The product is used as a plugin in various Atlassian products where the following are affected: Confluence before version 6.15.2, Crucible before version 4.7.0, Crowd before version 3.4.3, Fisheye before version 4.7.0, Jira before version 7.13.3 and 8.x before 8.1.0.CVSS5.4MediumEPSS3.34%RoutineCVE-2018-20237atlassian · confluence_data_center +1 moreatlassian confluence_data_centerAtlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature.CVSS6.5MediumEPSS1.74%