Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Atlassian Confluence Asymmetric Resource Consumption (Amplification) Vulnerability (CVE-2025-22166) CVE-2025-22166 CWE-405 CWE-405 High Atlassian Confluence CVE-2023-22505 Vulnerability (CVE-2023-22505) CVE-2023-22505 High Atlassian Confluence CVE-2023-22508 Vulnerability (CVE-2023-22508) CVE-2023-22508 High Atlassian Confluence CVE-2023-22512 Vulnerability (CVE-2023-22512) CVE-2023-22512 High Atlassian Confluence CVE-2024-21683 Vulnerability (CVE-2024-21683) CVE-2024-21683 High Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6668) CVE-2016-6668 CWE-200 CWE-200 High Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7415) CVE-2017-7415 CWE-200 CWE-200 High Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-22526) CVE-2023-22526 CWE-94 CWE-94 High Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21672) CVE-2024-21672 CWE-94 CWE-94 High Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21673) CVE-2024-21673 CWE-94 CWE-94 High Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21674) CVE-2024-21674 CWE-94 CWE-94 High Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3394) CVE-2019-3394 CWE-22 CWE-22 High Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3398) CVE-2019-3398 CWE-22 CWE-22 High Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21677) CVE-2024-21677 CWE-22 CWE-22 High Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21678) CVE-2024-21678 CWE-707 CWE-707 High Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21686) CVE-2024-21686 CWE-707 CWE-707 High Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21690) CVE-2024-21690 CWE-707 CWE-707 High Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39114) CVE-2021-39114 CWE-138 CWE-138 High Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22522) CVE-2023-22522 CWE-138 CWE-138 High Atlassian Confluence information disclosure CVE-2017-7415 CWE-306 CWE-306 High Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2019-20406) CVE-2019-20406 CWE-427 CWE-427 High Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2021-43940) CVE-2021-43940 CWE-427 CWE-427 High Atlassian Crowd Remote Code Execution CVE-2019-11580 CWE-78 CWE-78 High Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41305) CVE-2021-41305 CWE-639 CWE-639 High Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41306) CVE-2021-41306 CWE-639 CWE-639 High Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41307) CVE-2021-41307 CWE-639 CWE-639 High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-4319) CVE-2016-4319 CWE-352 CWE-352 High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39124) CVE-2021-39124 CWE-352 CWE-352 High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39126) CVE-2021-39126 CWE-352 CWE-352 High Atlassian Jira CVE-2018-5231 Vulnerability (CVE-2018-5231) CVE-2018-5231 High Atlassian Jira CVE-2019-8442 Vulnerability (CVE-2019-8442) CVE-2019-8442 High Atlassian Jira CVE-2019-20413 Vulnerability (CVE-2019-20413) CVE-2019-20413 High Atlassian Jira CVE-2019-20898 Vulnerability (CVE-2019-20898) CVE-2019-20898 High Atlassian Jira CVE-2020-14167 Vulnerability (CVE-2020-14167) CVE-2020-14167 High Atlassian Jira CVE-2020-14178 Vulnerability (CVE-2020-14178) CVE-2020-14178 High Atlassian Jira CVE-2021-39123 Vulnerability (CVE-2021-39123) CVE-2021-39123 High Atlassian Jira CVE-2021-43947 Vulnerability (CVE-2021-43947) CVE-2021-43947 High Atlassian Jira Improper Authentication Vulnerability (CVE-2019-8443) CVE-2019-8443 CWE-287 CWE-287 High Atlassian Jira Improper Authentication Vulnerability (CVE-2021-26070) CVE-2021-26070 CWE-287 CWE-287 High Atlassian Jira Improper Authentication Vulnerability (CVE-2021-41312) CVE-2021-41312 CWE-287 CWE-287 High Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-18113) CVE-2017-18113 CWE-94 CWE-94 High Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-15001) CVE-2019-15001 CWE-94 CWE-94 High Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-43944) CVE-2021-43944 CWE-94 CWE-94 High Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39128) CVE-2021-39128 CWE-138 CWE-138 High Atlassian Jira insecure REST permissions CWE-306 CWE-306 High Atlassian Jira Insufficient Session Expiration Vulnerability (CVE-2021-39113) CVE-2021-39113 CWE-613 CWE-613 High Atlassian Jira Missing Authorization Vulnerability (CVE-2019-3399) CVE-2019-3399 CWE-862 CWE-862 High Atlassian Jira Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-6619) CVE-2007-6619 CWE-264 CWE-264 High Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20400) CVE-2019-20400 CWE-427 CWE-427 High Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20419) CVE-2019-20419 CWE-427 CWE-427 High Atlassian OAuth Plugin IconUriServlet SSRF CVE-2017-9506 CWE-918 CWE-918 High ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-1583) CVE-2015-1583 CWE-352 CWE-352 High ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2539) CVE-2016-2539 CWE-352 CWE-352 High ATutor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10400) CVE-2016-10400 CWE-22 CWE-22 High ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11446) CVE-2019-11446 CWE-434 CWE-434 High ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-12169) CVE-2019-12169 CWE-434 CWE-434 High ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-12170) CVE-2019-12170 CWE-434 CWE-434 High ATutor Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-43498) CVE-2021-43498 CWE-640 CWE-640 High Authentication Bypass in Ivanti Connect Secure and Policy Secure (CVE-2023-46805) CVE-2023-46805 CWE-287 CWE-287 High Authentication bypass via MongoDB operator injection CWE-943 CWE-943 High Auxiliary systems SSRF CWE-918 CWE-918 High axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-58754) CVE-2025-58754 CWE-770 CWE-770 High axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44488) CVE-2026-44488 CWE-770 CWE-770 High axios Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-44486) CVE-2026-44486 CWE-200 CWE-200 High axios Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-25639) CVE-2026-25639 CWE-754 CWE-754 High axios Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-44495) CVE-2026-44495 CWE-94 CWE-94 High axios Improper Input Validation Vulnerability (CVE-2019-10742) CVE-2019-10742 CWE-20 CWE-20 High axios Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-42033) CVE-2026-42033 CWE-1321 CWE-1321 High axios Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-44490) CVE-2026-44490 CWE-1321 CWE-1321 High axios Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-42035) CVE-2026-42035 CWE-707 CWE-707 High axios Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-44487) CVE-2026-44487 CWE-201 CWE-201 High axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-39338) CVE-2024-39338 CWE-918 CWE-918 High axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-27152) CVE-2025-27152 CWE-918 CWE-918 High axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-42038) CVE-2026-42038 CWE-918 CWE-918 High axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-44492) CVE-2026-44492 CWE-918 CWE-918 High 1...5678...179 6 / 179
