CVE-2020-14175

🗓️ 24 Jul 2020 07:05:16Reported by atlassianType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 101 Views

Atlassian Confluence Server and Data Center before 7.4.2 and from 7.5.0 before 7.5.2 allows XSS via user macro parameters

Reporter	Title	Published	Views	Family All 10
Atlassian	XSS in user macro parameters - CVE-2020-14175	24 Jul 202003:39	–	atlassian
CNVD	Atlassian Confluence Server and Data Center Cross-Site Scripting Vulnerability	28 Jul 202000:00	–	cnvd
Tenable Nessus	Atlassian Confluence < 7.4.2 / 7.5.x < 7.5.2 XSS (CONFSERVER-60102)	31 Jul 202000:00	–	nessus
Tenable Nessus	Atlassian Confluence < 7.4.2 Cross-Site Scripting	5 Jul 202100:00	–	nessus
Tenable Nessus	Atlassian Confluence 7.5.x < 7.5.2 Cross-Site Scripting	5 Jul 202100:00	–	nessus
Cvelist	CVE-2020-14175	24 Jul 202007:05	–	cvelist
EUVD	EUVD-2020-6332	7 Oct 202500:30	–	euvd
NVD	CVE-2020-14175	24 Jul 202007:15	–	nvd
OSV	CVE-2020-14175	24 Jul 202007:15	–	osv
Prion	Cross site scripting	24 Jul 202007:15	–	prion

NVD

Node

atlassian confluence_data_centerRange<7.4.2

atlassian confluence_data_centerRange7.5.0–7.5.2

atlassian confluence_serverRange<7.4.2

atlassian confluence_serverRange7.5.0–7.5.2

[
  {
    "product": "Confluence Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "7.4.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "7.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.5.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]