Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

Atlassian Confluence

Confluence is your remote-friendly team workspace where knowledge and collaboration meet.

Official Site:

https://www.atlassian.com/software/confluence

Severity Summary:

Critical: 9 High: 20 Medium: 29
Reference
Title
Severity
CVE-2020-29445
Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability
Medium
CVE-2020-29444
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-26072
Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability
Medium
CVE-2020-29448
Atlassian Confluence Vulnerability
Medium
CVE-2020-29450
Atlassian Confluence Unrestricted Upload of File with Dangerous Type Vulnerability
Medium
CVE-2020-14175
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-4027
Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability
Medium
CVE-2019-15006
Atlassian Confluence Improper Control of Dynamically-Managed Code Resources Vulnerability
Medium
CVE-2019-15005
Atlassian Confluence Missing Authorization Vulnerability
Medium
CVE-2018-20237
Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2018-13389
Atlassian Confluence Improper Input Validation Vulnerability
Medium
CVE-2015-8398
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-8399
Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2017-18084
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-22504
Atlassian Confluence Unrestricted Upload of File with Dangerous Type Vulnerability
Medium
CVE-2023-22503
Atlassian Confluence Vulnerability
Medium
CVE-2020-36290
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-18083
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-16856
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-9505
Atlassian Confluence Incorrect Default Permissions Vulnerability
Medium
CVE-2018-20239
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2016-4317
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2012-2928
Atlassian Confluence Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2012-6342
Atlassian Confluence Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2016-6283
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-26085
Atlassian Confluence Missing Authorization Vulnerability
Medium
CVE-2019-20102
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-18085
Atlassian Confluence Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium