Login Request a demo
UP
Product
Universal Plugin Manager
by Atlassian · last CVE Aug 23, 2019
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Universal Plugin Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-20233
6.5
2%
Jan 18
The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make…
Affected: before 2.22.14
CVE-2018-5229
5.4
1%
Jul 16
The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remote attackers to inject arbitrary HTML or JavaScript via a…
Affected: before 2.22.9
CVE-2019-14999
4.3
1%
Aug 23
The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3…
Affected: before 2.22.19; 3.0.0 before 3.0.3; 4.0.0 before 4.0.3
Showing 3