Vendors / Gliffy Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Gliffy records in CISA KEV No Gliffy vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or…
CVSS 2.0 MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03025 · Published 2012-05-22 · No fix listed CWE-264
Priority LOW 30
In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6.
CVSS 4.0 MEDIUM 6.9· Network · Low privileges · User interaction · EPSS 0.00337 · Published 2024-11-11 · Fixed in 4.14.0-6 CWE-942
Priority LOW 30
A flaw in Gliffy results in broken authentication through the reset functionality of the application.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2025-02-24 · Fixed in 4.14.0-7 CWE-287
Priority LOW 26
Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery (CSRF) flaw.
CVSS 4.0 MEDIUM 5.9· Network · Low privileges · User interaction · EPSS 0.0021 · Published 2025-02-20 · Fixed in 4.14.0-7 CWE-352
Open these records in search → All records by CVSS severity
0 0 4 0 0
