Atlassian Questions For Confluence — known CVE vulnerabilities

Every CVE whose affected-product data names Atlassian Questions For Confluence, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-26138 — CVSS 9.8 (critical) — actively exploited: The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users…
• CVE-2018-13393 — CVSS 6.5 (medium): The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was…
• CVE-2018-13394 — CVSS 6.5 (medium): The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated…