CO
Product
Confluence
14
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 8Low 2
Watch
Add Confluence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54525 | 7.5 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription… Affected: before 1.5.0 |
| CVE-2025-54463 | 7.5 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an… Affected: before 1.5.0 |
| CVE-2025-52931 | 7.5 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription… Affected: before 1.5.0 |
| CVE-2025-44004 | 7.2 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without… Affected: before 1.5.0 |
| CVE-2025-48731 | 6.4 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the… Affected: before 1.5.0 |
| CVE-2025-53514 | 5.9 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an… Affected: before 1.5.0 |
| CVE-2025-13523 | 5.4 | Feb 6 | Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow Affected: 1.0.0 before 1.7.0 |
| CVE-2025-8285 | 5.3 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the… Affected: before 1.5.0 |
| CVE-2025-54478 | 5.3 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel… Affected: before 1.5.0 |
| CVE-2025-54458 | 5.0 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space… Affected: before 1.5.0 |
| CVE-2025-53910 | 4.0 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to… Affected: before 1.5.0 |
| CVE-2025-44001 | 4.0 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access… Affected: before 1.5.0 |
| CVE-2025-53857 | 3.7 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access… Affected: before 1.5.0 |
| CVE-2025-49221 | 3.7 | Aug 11 | Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription… Affected: before 1.5.0 |
Showing 14