CVE-2020-35121

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaScript into saved macro parameters that would execute when a user viewed a page with that instance of the macro...

CVE-2020-35122

The CVE-2020-35122 vulnerability affects the Keysight Database Connector plugin for Atlassian Confluence prior to version 1.5.0. A malicious user could bypass access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection. Root cause: ins...

CVE-2020-35122

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection...

Keysight Database Connector plugin code injection vulnerability

Bitbucket Keysight is a database connector plugin available for Atlassian products from the Bitbucket organization. A security vulnerability exists in the Keysight Database Connector plugin before 1.5.0, which originates from a malicious user being able to insert arbitrary JavaScript into saved...

CVE-2020-35121: Undefined Security Weakness

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaScript into saved macro parameters that would execute when a user viewed a page with that instance of the macro...

PT-2020-17259

Name of the Vulnerable Software and Affected Versions Keysight Database Connector plugin versions prior to 1.5.0 for Confluence Description An issue was discovered in the Keysight Database Connector plugin for Confluence, where a malicious user could bypass access controls for using a saved...

PT-2020-17258

Name of the Vulnerable Software and Affected Versions Keysight Database Connector plugin versions prior to 1.5.0 for Confluence Description An issue was discovered in the Keysight Database Connector plugin for Confluence, where a malicious user could insert arbitrary JavaScript into saved macro...

CVE-2020-35122: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection...