3624 matches found
CVE-2016-6668
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...
CVE-2016-6668
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...
Design/Logic Flaw
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...
CVE-2016-6668
The CVE-2016-6668 issue affects Atlassian HipChat integration plugins across Bitbucket Server, Confluence HipChat, and HipChat for JIRA. The vulnerability enables remote attackers to obtain the secret key used to communicate with HipChat instances by reading unspecified pages. Affected versions i...
CVE-2016-6668
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...
CVE-2016-6668: Exposure of Sensitive Information to an Unauthorized Actor
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...
PT-2017-9013
Name of the Vulnerable Software and Affected Versions Atlassian Hipchat Integration Plugin for Bitbucket Server versions 6.26.0 through 6.27.5 Atlassian Hipchat Integration Plugin for Bitbucket Server versions 6.28.0 through 7.3.7 Atlassian Hipchat Integration Plugin for Bitbucket Server versions...
CVE-2016-6283
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
CVE-2016-6283
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
Cross site scripting
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
CVE-2016-6283
CVE-2016-6283 affects Atlassian Confluence
CVE-2016-6283
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
PT-2017-8954
Name of the Vulnerable Software and Affected Versions Atlassian Confluence versions prior to 5.10.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to the "pages/doeditattachment.action" API endpoint...
CVE-2016-6283: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
The Confluence Login page should not gives details of build version to unauthenticated users
The login page discloses detailed version information of the application to unauthenticated users. !screenshot-1.png|thumbnail! This information facilitates finding vulnerabilities for possible attackers suggestion: Remove the build number completely in the login page...
The Confluence Login page should not gives details of build version to unauthenticated users
The login page discloses detailed version information of the application to unauthenticated users. !screenshot-1.png|thumbnail! This information facilitates finding vulnerabilities for possible attackers suggestion: Remove the build number completely in the login page...
The Confluence Login page should not gives details of build version to unauthenticated users
The login page discloses detailed version information of the application to unauthenticated users. !screenshot-1.png|thumbnail! This information facilitates finding vulnerabilities for possible attackers suggestion: Remove the build number completely in the login page...
Atlassian Confluence HTML Injection Vulnerability
Atlassian Confluence is a professional enterprise knowledge management and collaboration software that can also be used to build enterprise WiKi. An HTML injection vulnerability exists in Atlassian Confluence. An attacker can exploit the vulnerability to execute arbitrary script code in the brows...
Atlassian Confluence XSS Vulnerability
Atlassian Confluence is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
