6.15.1

DATE	CVE	VULNERABILITY TITLE	RISK
2020-04-22	CVE-2019-20102	Cross-site Scripting vulnerability in Atlassian Confluence Server The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version 6.15.0 before version 6.15.5 allows remote attackers to achieve stored cross-site- scripting (SXSS) via a malicious attachment with a modified `mimeType` parameter. network low complexity atlassian CWE-79	6.1
2019-12-19	CVE-2019-15006	Improper Control of Dynamically-Managed Code Resources vulnerability in Atlassian Confluence and Confluence Server There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. network high complexity atlassian CWE-913	6.5
2019-08-29	CVE-2019-3394	Path Traversal vulnerability in Atlassian Confluence There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. network low complexity atlassian CWE-22	8.8
2019-04-30	CVE-2018-20239	Cross-site Scripting vulnerability in Atlassian products Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the applinkStartingUrl parameter. network low complexity atlassian CWE-79	5.4
2019-04-18	CVE-2019-3398	Path Traversal vulnerability in Atlassian Confluence Server Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. network low complexity atlassian CWE-22	8.8