Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

atlassian / universal_plugin_manager CVEs

Beta · best-effort

3 CVEs tagged to atlassian / universal_plugin_manager — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to atlassian vendor archive

CVE-2019-14999

Published Aug 23, 2019

The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allow…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2018-20233

Published Jan 18, 2019

The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make networ…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2018-5229

Published Jul 16, 2018

The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remote attackers to inject arbitrary HTML or JavaScript via a cr…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-3 of 3 CVEsPage 1 of 1