Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity ASP.NET viewstate encryption disabled CWE-319 CWE-319 Medium ASP.NET WCF metadata enabled for behavior CWE-200 CWE-200 Medium ASP.NET WCF replay attacks are not detected CWE-294 CWE-294 Medium ASP.NET WCF service include exception details CWE-209 CWE-209 Medium Atlassian Confluence Access Restriction Bypass CVE-2017-9505 Medium Atlassian Confluence Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6342) CVE-2012-6342 CWE-352 CWE-352 Medium Atlassian Confluence CVE-2020-29448 Vulnerability (CVE-2020-29448) CVE-2020-29448 Medium Atlassian Confluence CVE-2023-22503 Vulnerability (CVE-2023-22503) CVE-2023-22503 Medium Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8399) CVE-2015-8399 CWE-200 CWE-200 Medium Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-20237) CVE-2018-20237 CWE-200 CWE-200 Medium Atlassian Confluence Improper Control of Dynamically-Managed Code Resources Vulnerability (CVE-2019-15006) CVE-2019-15006 CWE-913 CWE-913 Medium Atlassian Confluence Improper Input Validation Vulnerability (CVE-2018-13389) CVE-2018-13389 CWE-20 CWE-20 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8398) CVE-2015-8398 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-4317) CVE-2016-4317 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6283) CVE-2016-6283 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-16856) CVE-2017-16856 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18083) CVE-2017-18083 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18084) CVE-2017-18084 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18085) CVE-2017-18085 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18086) CVE-2017-18086 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20239) CVE-2018-20239 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20102) CVE-2019-20102 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14175) CVE-2020-14175 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-29444) CVE-2020-29444 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36290) CVE-2020-36290 CWE-707 CWE-707 Medium Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-4027) CVE-2020-4027 CWE-138 CWE-138 Medium Atlassian Confluence Incorrect Default Permissions Vulnerability (CVE-2017-9505) CVE-2017-9505 CWE-276 CWE-276 Medium Atlassian Confluence Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2024-21703) CVE-2024-21703 CWE-732 CWE-732 Medium Atlassian Confluence Missing Authorization Vulnerability (CVE-2019-15005) CVE-2019-15005 CWE-862 CWE-862 Medium Atlassian Confluence Missing Authorization Vulnerability (CVE-2021-26085) CVE-2021-26085 CWE-862 CWE-862 Medium Atlassian Confluence Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928) CVE-2012-2928 CWE-264 CWE-264 Medium Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-29445) CVE-2020-29445 CWE-918 CWE-918 Medium Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-26072) CVE-2021-26072 CWE-918 CWE-918 Medium Atlassian Confluence Stored Cross Site Scripting CVE-2016-6283 CWE-79 CWE-79 Medium Atlassian Confluence Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-29450) CVE-2020-29450 CWE-434 CWE-434 Medium Atlassian Confluence Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-22504) CVE-2023-22504 CWE-434 CWE-434 Medium Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-14174) CVE-2020-14174 CWE-639 CWE-639 Medium Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-36231) CVE-2020-36231 CWE-639 CWE-639 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-6832) CVE-2008-6832 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-16862) CVE-2017-16862 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-18033) CVE-2017-18033 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-8447) CVE-2019-8447 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11586) CVE-2019-11586 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11587) CVE-2019-11587 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11588) CVE-2019-11588 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-14998) CVE-2019-14998 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20098) CVE-2019-20098 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20099) CVE-2019-20099 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20100) CVE-2019-20100 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20401) CVE-2019-20401 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20405) CVE-2019-20405 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20411) CVE-2019-20411 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20415) CVE-2019-20415 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43941) CVE-2021-43941 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43952) CVE-2021-43952 CWE-352 CWE-352 Medium Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43953) CVE-2021-43953 CWE-352 CWE-352 Medium Atlassian Jira CVE-2019-8448 Vulnerability (CVE-2019-8448) CVE-2019-8448 Medium Atlassian Jira CVE-2019-11583 Vulnerability (CVE-2019-11583) CVE-2019-11583 Medium Atlassian Jira CVE-2019-20402 Vulnerability (CVE-2019-20402) CVE-2019-20402 Medium Atlassian Jira CVE-2019-20403 Vulnerability (CVE-2019-20403) CVE-2019-20403 Medium Atlassian Jira CVE-2019-20404 Vulnerability (CVE-2019-20404) CVE-2019-20404 Medium Atlassian Jira CVE-2019-20410 Vulnerability (CVE-2019-20410) CVE-2019-20410 Medium Atlassian Jira CVE-2019-20418 Vulnerability (CVE-2019-20418) CVE-2019-20418 Medium Atlassian Jira CVE-2019-20899 Vulnerability (CVE-2019-20899) CVE-2019-20899 Medium Atlassian Jira CVE-2020-4029 Vulnerability (CVE-2020-4029) CVE-2020-4029 Medium Atlassian Jira CVE-2020-14165 Vulnerability (CVE-2020-14165) CVE-2020-14165 Medium Atlassian Jira CVE-2020-14168 Vulnerability (CVE-2020-14168) CVE-2020-14168 Medium Atlassian Jira CVE-2020-29451 Vulnerability (CVE-2020-29451) CVE-2020-29451 Medium Atlassian Jira CVE-2020-36235 Vulnerability (CVE-2020-36235) CVE-2020-36235 Medium Atlassian Jira CVE-2020-36237 Vulnerability (CVE-2020-36237) CVE-2020-36237 Medium Atlassian Jira CVE-2020-36286 Vulnerability (CVE-2020-36286) CVE-2020-36286 Medium Atlassian Jira CVE-2021-26075 Vulnerability (CVE-2021-26075) CVE-2021-26075 Medium Atlassian Jira CVE-2021-26081 Vulnerability (CVE-2021-26081) CVE-2021-26081 Medium Atlassian Jira CVE-2021-39116 Vulnerability (CVE-2021-39116) CVE-2021-39116 Medium Atlassian Jira CVE-2021-39121 Vulnerability (CVE-2021-39121) CVE-2021-39121 Medium 1...6789...121 7 / 121
