VendorsMattermostconfluenceany version
Vulnerabilities

Mattermost Confluence any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2025-13523
Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow
Published 2026-02-06 · Analyzed
7.7EPSS 0.002
CVE-2025-52931
Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
7.5EPSS 0.003
CVE-2025-54525
Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
7.5EPSS 0.003
CVE-2025-54463
Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
7.5EPSS 0.003
CVE-2025-54478
Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
7.2EPSS 0.002
CVE-2025-44004
Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
7.2EPSS 0.002
CVE-2025-48731
Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
6.4EPSS 0.002
CVE-2025-53514
Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
5.9EPSS 0.003
CVE-2025-8285
Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
5.3EPSS 0.002
CVE-2025-54458
Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
5.0EPSS 0.002
CVE-2025-44001
Unauthorized Channel Subscription Read in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
4.0EPSS 0.002
CVE-2025-53910
Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
4.0EPSS 0.002
CVE-2025-49221
Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
3.7EPSS 0.002
CVE-2025-53857
Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin
Published 2025-08-11 · Analyzed
3.7EPSS 0.002