Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21673) CVE-2024-21673 CWE-94 CWE-94 High Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21674) CVE-2024-21674 CWE-94 CWE-94 High Atlassian Confluence Improper Input Validation Vulnerability (CVE-2018-13389) CVE-2018-13389 CWE-20 CWE-20 Medium Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3394) CVE-2019-3394 CWE-22 CWE-22 High Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3396) CVE-2019-3396 CWE-22 CWE-22 Critical Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3398) CVE-2019-3398 CWE-22 CWE-22 High Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8398) CVE-2015-8398 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-4317) CVE-2016-4317 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6283) CVE-2016-6283 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-16856) CVE-2017-16856 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18083) CVE-2017-18083 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18084) CVE-2017-18084 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18085) CVE-2017-18085 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18086) CVE-2017-18086 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20239) CVE-2018-20239 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20102) CVE-2019-20102 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14175) CVE-2020-14175 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-29444) CVE-2020-29444 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36290) CVE-2020-36290 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-4027) CVE-2020-4027 CWE-138 CWE-138 Medium Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-26084) CVE-2021-26084 CWE-138 CWE-138 Critical Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39114) CVE-2021-39114 CWE-138 CWE-138 High Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22522) CVE-2023-22522 CWE-138 CWE-138 High Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22527) CVE-2023-22527 CWE-138 CWE-138 Critical Atlassian Confluence Incorrect Authorization Vulnerability (CVE-2023-22518) CVE-2023-22518 CWE-863 CWE-863 Critical Atlassian Confluence Incorrect Behavior Order: Validate Before Canonicalize Vulnerability (CVE-2022-26136) CVE-2022-26136 CWE-180 CWE-180 Critical Atlassian Confluence Incorrect Behavior Order: Validate Before Canonicalize Vulnerability (CVE-2022-26137) CVE-2022-26137 CWE-180 CWE-180 Critical Atlassian Confluence Incorrect Default Permissions Vulnerability (CVE-2017-9505) CVE-2017-9505 CWE-276 CWE-276 Medium Atlassian Confluence information disclosure CVE-2017-7415 High Atlassian Confluence Missing Authorization Vulnerability (CVE-2019-15005) CVE-2019-15005 CWE-862 CWE-862 Medium Atlassian Confluence Missing Authorization Vulnerability (CVE-2021-26085) CVE-2021-26085 CWE-862 CWE-862 Medium Atlassian Confluence Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928) CVE-2012-2928 CWE-264 CWE-264 Medium Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-3395) CVE-2019-3395 CWE-918 CWE-918 Critical Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-29445) CVE-2020-29445 CWE-918 CWE-918 Medium Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-26072) CVE-2021-26072 CWE-918 CWE-918 Medium Atlassian Confluence Stored Cross Site Scripting CVE-2016-6283 Medium Atlassian Confluence Unauthenticated Remote Code Execution Vulnerability (CVE-2022-26134) CVE-2022-26134 Critical Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2019-20406) CVE-2019-20406 CWE-427 CWE-427 High Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2021-43940) CVE-2021-43940 CWE-427 CWE-427 High Atlassian Confluence Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-29450) CVE-2020-29450 CWE-434 CWE-434 Medium Atlassian Confluence Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-22504) CVE-2023-22504 CWE-434 CWE-434 Medium Atlassian Crowd Remote Code Execution CVE-2019-11580 CWE-78 CWE-78 High Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-14174) CVE-2020-14174 CWE-639 CWE-639 Medium Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-36231) CVE-2020-36231 CWE-639 CWE-639 Medium Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41305) CVE-2021-41305 CWE-639 CWE-639 High Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41306) CVE-2021-41306 CWE-639 CWE-639 High Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41307) CVE-2021-41307 CWE-639 CWE-639 High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-6832) CVE-2008-6832 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-4319) CVE-2016-4319 CWE-352 CWE-352 High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-16862) CVE-2017-16862 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-18033) CVE-2017-18033 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-8447) CVE-2019-8447 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11586) CVE-2019-11586 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11587) CVE-2019-11587 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11588) CVE-2019-11588 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-14998) CVE-2019-14998 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20098) CVE-2019-20098 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20099) CVE-2019-20099 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20100) CVE-2019-20100 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20401) CVE-2019-20401 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20405) CVE-2019-20405 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20411) CVE-2019-20411 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20415) CVE-2019-20415 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-26071) CVE-2021-26071 CWE-352 CWE-352 Low Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39124) CVE-2021-39124 CWE-352 CWE-352 High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39126) CVE-2021-39126 CWE-352 CWE-352 High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43941) CVE-2021-43941 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43952) CVE-2021-43952 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43953) CVE-2021-43953 CWE-352 CWE-352 Medium Atlassian Jira CVE-2012-2926 Vulnerability (CVE-2012-2926) CVE-2012-2926 Critical Atlassian Jira CVE-2018-5231 Vulnerability (CVE-2018-5231) CVE-2018-5231 High Atlassian Jira CVE-2019-8442 Vulnerability (CVE-2019-8442) CVE-2019-8442 High Atlassian Jira CVE-2019-8448 Vulnerability (CVE-2019-8448) CVE-2019-8448 Medium Atlassian Jira CVE-2019-11583 Vulnerability (CVE-2019-11583) CVE-2019-11583 Medium Atlassian Jira CVE-2019-20402 Vulnerability (CVE-2019-20402) CVE-2019-20402 Medium 1...11121314...303 12 / 303
