CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9505

Atlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to view a page when creating a workbox notification about new comments. An attacker who can login to Confluence could receive workbox notifications, which contain the content of comments, for comments added to a page after they started watching it even if they do not have permission to view the page itself.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.5%

CVSS Severity

CVSS v3 Score 4.3

CVSS v2 Score 4.0

References

Products affected by CVE-2017-9505

Atlassian » Confluence » Version: 4.3

cpe:2.3:a:atlassian:confluence:4.3
Atlassian » Confluence » Version: 4.3.1

cpe:2.3:a:atlassian:confluence:4.3.1
Atlassian » Confluence » Version: 4.3.2

cpe:2.3:a:atlassian:confluence:4.3.2
Atlassian » Confluence » Version: 4.3.3

cpe:2.3:a:atlassian:confluence:4.3.3
Atlassian » Confluence » Version: 4.3.5

cpe:2.3:a:atlassian:confluence:4.3.5
Atlassian » Confluence » Version: 4.3.6

cpe:2.3:a:atlassian:confluence:4.3.6
Atlassian » Confluence » Version: 4.3.7

cpe:2.3:a:atlassian:confluence:4.3.7
Atlassian » Confluence » Version: 5.0

cpe:2.3:a:atlassian:confluence:5.0
Atlassian » Confluence » Version: 5.0.1

cpe:2.3:a:atlassian:confluence:5.0.1
Atlassian » Confluence » Version: 5.0.2

cpe:2.3:a:atlassian:confluence:5.0.2
Atlassian » Confluence » Version: 5.0.3

cpe:2.3:a:atlassian:confluence:5.0.3
Atlassian » Confluence » Version: 5.1

cpe:2.3:a:atlassian:confluence:5.1
Atlassian » Confluence » Version: 5.1.1

cpe:2.3:a:atlassian:confluence:5.1.1
Atlassian » Confluence » Version: 5.1.2

cpe:2.3:a:atlassian:confluence:5.1.2
Atlassian » Confluence » Version: 5.1.3

cpe:2.3:a:atlassian:confluence:5.1.3
Atlassian » Confluence » Version: 5.1.4

cpe:2.3:a:atlassian:confluence:5.1.4
Atlassian » Confluence » Version: 5.1.5

cpe:2.3:a:atlassian:confluence:5.1.5
Atlassian » Confluence » Version: 5.10

cpe:2.3:a:atlassian:confluence:5.10
Atlassian » Confluence » Version: 5.10.0

cpe:2.3:a:atlassian:confluence:5.10.0
Atlassian » Confluence » Version: 5.10.1

cpe:2.3:a:atlassian:confluence:5.10.1
Atlassian » Confluence » Version: 5.10.2

cpe:2.3:a:atlassian:confluence:5.10.2
Atlassian » Confluence » Version: 5.10.3

cpe:2.3:a:atlassian:confluence:5.10.3
Atlassian » Confluence » Version: 5.10.4

cpe:2.3:a:atlassian:confluence:5.10.4
Atlassian » Confluence » Version: 5.10.5

cpe:2.3:a:atlassian:confluence:5.10.5
Atlassian » Confluence » Version: 5.10.6

cpe:2.3:a:atlassian:confluence:5.10.6
Atlassian » Confluence » Version: 5.10.7

cpe:2.3:a:atlassian:confluence:5.10.7
Atlassian » Confluence » Version: 5.10.8

cpe:2.3:a:atlassian:confluence:5.10.8
Atlassian » Confluence » Version: 5.10.9

cpe:2.3:a:atlassian:confluence:5.10.9
Atlassian » Confluence » Version: 5.2.3

cpe:2.3:a:atlassian:confluence:5.2.3
Atlassian » Confluence » Version: 5.2.4

cpe:2.3:a:atlassian:confluence:5.2.4
Atlassian » Confluence » Version: 5.2.5

cpe:2.3:a:atlassian:confluence:5.2.5
Atlassian » Confluence » Version: 5.3

cpe:2.3:a:atlassian:confluence:5.3
Atlassian » Confluence » Version: 5.3.1

cpe:2.3:a:atlassian:confluence:5.3.1
Atlassian » Confluence » Version: 5.3.4

cpe:2.3:a:atlassian:confluence:5.3.4
Atlassian » Confluence » Version: 5.4

cpe:2.3:a:atlassian:confluence:5.4
Atlassian » Confluence » Version: 5.4.1

cpe:2.3:a:atlassian:confluence:5.4.1
Atlassian » Confluence » Version: 5.4.2

cpe:2.3:a:atlassian:confluence:5.4.2
Atlassian » Confluence » Version: 5.4.3

cpe:2.3:a:atlassian:confluence:5.4.3
Atlassian » Confluence » Version: 5.4.4

cpe:2.3:a:atlassian:confluence:5.4.4
Atlassian » Confluence » Version: 5.5

cpe:2.3:a:atlassian:confluence:5.5
Atlassian » Confluence » Version: 5.5.0

cpe:2.3:a:atlassian:confluence:5.5.0
Atlassian » Confluence » Version: 5.5.1

cpe:2.3:a:atlassian:confluence:5.5.1
Atlassian » Confluence » Version: 5.5.2

cpe:2.3:a:atlassian:confluence:5.5.2
Atlassian » Confluence » Version: 5.5.3

cpe:2.3:a:atlassian:confluence:5.5.3
Atlassian » Confluence » Version: 5.5.6

cpe:2.3:a:atlassian:confluence:5.5.6
Atlassian » Confluence » Version: 5.5.7

cpe:2.3:a:atlassian:confluence:5.5.7
Atlassian » Confluence » Version: 5.6

cpe:2.3:a:atlassian:confluence:5.6
Atlassian » Confluence » Version: 5.6.1

cpe:2.3:a:atlassian:confluence:5.6.1
Atlassian » Confluence » Version: 5.6.3

cpe:2.3:a:atlassian:confluence:5.6.3
Atlassian » Confluence » Version: 5.6.4

cpe:2.3:a:atlassian:confluence:5.6.4
Atlassian » Confluence » Version: 5.6.5

cpe:2.3:a:atlassian:confluence:5.6.5
Atlassian » Confluence » Version: 5.6.6

cpe:2.3:a:atlassian:confluence:5.6.6
Atlassian » Confluence » Version: 5.7

cpe:2.3:a:atlassian:confluence:5.7
Atlassian » Confluence » Version: 5.7.1

cpe:2.3:a:atlassian:confluence:5.7.1
Atlassian » Confluence » Version: 5.7.3

cpe:2.3:a:atlassian:confluence:5.7.3
Atlassian » Confluence » Version: 5.7.4

cpe:2.3:a:atlassian:confluence:5.7.4
Atlassian » Confluence » Version: 5.7.5

cpe:2.3:a:atlassian:confluence:5.7.5
Atlassian » Confluence » Version: 5.7.6

cpe:2.3:a:atlassian:confluence:5.7.6
Atlassian » Confluence » Version: 5.8.10

cpe:2.3:a:atlassian:confluence:5.8.10
Atlassian » Confluence » Version: 5.8.13

cpe:2.3:a:atlassian:confluence:5.8.13
Atlassian » Confluence » Version: 5.8.14

cpe:2.3:a:atlassian:confluence:5.8.14
Atlassian » Confluence » Version: 5.8.15

cpe:2.3:a:atlassian:confluence:5.8.15
Atlassian » Confluence » Version: 5.8.16

cpe:2.3:a:atlassian:confluence:5.8.16
Atlassian » Confluence » Version: 5.8.17

cpe:2.3:a:atlassian:confluence:5.8.17
Atlassian » Confluence » Version: 5.8.18

cpe:2.3:a:atlassian:confluence:5.8.18
Atlassian » Confluence » Version: 5.8.2

cpe:2.3:a:atlassian:confluence:5.8.2
Atlassian » Confluence » Version: 5.8.4

cpe:2.3:a:atlassian:confluence:5.8.4
Atlassian » Confluence » Version: 5.8.5

cpe:2.3:a:atlassian:confluence:5.8.5
Atlassian » Confluence » Version: 5.8.6

cpe:2.3:a:atlassian:confluence:5.8.6
Atlassian » Confluence » Version: 5.8.8

cpe:2.3:a:atlassian:confluence:5.8.8
Atlassian » Confluence » Version: 5.8.9

cpe:2.3:a:atlassian:confluence:5.8.9
Atlassian » Confluence » Version: 5.9.1

cpe:2.3:a:atlassian:confluence:5.9.1
Atlassian » Confluence » Version: 5.9.10

cpe:2.3:a:atlassian:confluence:5.9.10
Atlassian » Confluence » Version: 5.9.11

cpe:2.3:a:atlassian:confluence:5.9.11
Atlassian » Confluence » Version: 5.9.12

cpe:2.3:a:atlassian:confluence:5.9.12
Atlassian » Confluence » Version: 5.9.14

cpe:2.3:a:atlassian:confluence:5.9.14
Atlassian » Confluence » Version: 5.9.2

cpe:2.3:a:atlassian:confluence:5.9.2
Atlassian » Confluence » Version: 5.9.3

cpe:2.3:a:atlassian:confluence:5.9.3
Atlassian » Confluence » Version: 5.9.4

cpe:2.3:a:atlassian:confluence:5.9.4
Atlassian » Confluence » Version: 5.9.5

cpe:2.3:a:atlassian:confluence:5.9.5
Atlassian » Confluence » Version: 5.9.6

cpe:2.3:a:atlassian:confluence:5.9.6
Atlassian » Confluence » Version: 5.9.7

cpe:2.3:a:atlassian:confluence:5.9.7
Atlassian » Confluence » Version: 5.9.8

cpe:2.3:a:atlassian:confluence:5.9.8
Atlassian » Confluence » Version: 5.9.9

cpe:2.3:a:atlassian:confluence:5.9.9
Atlassian » Confluence » Version: 6.0

cpe:2.3:a:atlassian:confluence:6.0
Atlassian » Confluence » Version: 6.0.0

cpe:2.3:a:atlassian:confluence:6.0.0
Atlassian » Confluence » Version: 6.0.1

cpe:2.3:a:atlassian:confluence:6.0.1
Atlassian » Confluence » Version: 6.0.2

cpe:2.3:a:atlassian:confluence:6.0.2
Atlassian » Confluence » Version: 6.0.3

cpe:2.3:a:atlassian:confluence:6.0.3
Atlassian » Confluence » Version: 6.0.4

cpe:2.3:a:atlassian:confluence:6.0.4
Atlassian » Confluence » Version: 6.0.5

cpe:2.3:a:atlassian:confluence:6.0.5
Atlassian » Confluence » Version: 6.0.6

cpe:2.3:a:atlassian:confluence:6.0.6
Atlassian » Confluence » Version: 6.0.7

cpe:2.3:a:atlassian:confluence:6.0.7
Atlassian » Confluence » Version: 6.1

cpe:2.3:a:atlassian:confluence:6.1
Atlassian » Confluence » Version: 6.1.0

cpe:2.3:a:atlassian:confluence:6.1.0
Atlassian » Confluence » Version: 6.1.1

cpe:2.3:a:atlassian:confluence:6.1.1
Atlassian » Confluence » Version: 6.1.2

cpe:2.3:a:atlassian:confluence:6.1.2
Atlassian » Confluence » Version: 6.1.3

cpe:2.3:a:atlassian:confluence:6.1.3
Atlassian » Confluence » Version: 6.1.4

cpe:2.3:a:atlassian:confluence:6.1.4
Atlassian » Confluence » Version: 6.2

cpe:2.3:a:atlassian:confluence:6.2
Atlassian » Confluence » Version: 6.2.0

cpe:2.3:a:atlassian:confluence:6.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9505

Products

Pricing

Contact Us