CVE-2016-6668: atlassian confluence_server
Vulnerability summary
CVE-2016-6668 is a high (CVSS 7.5) vulnerability in atlassian confluence_server. EPSS estimates a 3.82% chance of exploitation in the next 30 days, higher than 90% of scored vulnerabilities.
Severe, CVSS 7.5 (NVD); no exploitation reported by the 5 checked sources; EPSS 4% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Timeline
- 23-01-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating with HipChat instances by reading unspecified pages.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.82%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
Increase +0.07 pp
From 3.74% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Atlassian2 products
- confluence_server5.5.0 | 5.9.1 | 5.9.2 | 5.9.3 | 5.9.4 | 5.9.5 | 5.9.6 | 5.9.7 | 5.9.8 | 5.9.9 | 5.9.10 | 5.9.11 | 5.9.12 | 5.10.0 | 5.10.1 | 5.10.2 | 5.10.3
- jira_integration_for_hipchat6.26.0 | 6.26.10 | 6.29.1 | 6.29.2 | 6.31.0 | 7.1.0 | 7.2.1 | 7.3.2 | 7.3.3 | 7.4.1 | 7.8.1 | 7.8.3 | 7.8.12
1 vendor · 2 products
References
6 links- www.securityfocus.com/archive/1/539530/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
- confluence.atlassian.com/doc/confluence-security-advisory-2016-09-21-849052104.htmlX Refsource CONFIRMVendor Advisory
- packetstormsecurity.com/files/139004/Atlassian-HipChat-Secret-Key-Disclosure.htmlX Refsource MISCThird Party AdvisoryVDB Entry