CVE-2019-3395

CVE-2019-3395: vulnerability in Atlassian Confluence Server

Published · Updated

Follow this CVE+ Monitor Confluence Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 6.7%
The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the fixed version for 6.6.x), from version 6.7.0 before 6.8.5 (the fixed version for 6.8.x), and from version 6.9.0 before 6.9.3 (the fixed version for 6.9.x) allows remote attackers to send arbitrary HTTP and WebDAV requests from a Confluence Server or Data Center instance via Server-Side Request Forgery.
Affected products
Atlassian · Confluence Server
Related CVEs — Atlassian Confluence Server

In the same product, most dangerous first.

CVE-2023-22518CRITICALCVE-2023-22518EPSS 100.0%KEVCVE-2022-26134CRITICALCVE-2022-26134EPSS 100.0%KEVCVE-2021-26084CRITICALCVE-2021-26084EPSS 100.0%KEVCVE-2023-22527CRITICALCVE-2023-22527EPSS 100.0%KEVCVE-2021-26085MEDIUMCVE-2021-26085EPSS 99.9%KEVCVE-2019-3396CRITICALCVE-2019-3396EPSS 99.9%KEV