Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Gliffy Clear all filters
TI-2024-04804 CVE-2024-5174 · GHSA-hv9g-xmv8-5frh

Broken Authentication in Gliffy

Priority LOW 30

A flaw in Gliffy results in broken authentication through the reset functionality of the application.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00362 Published 2025-02-24 Fixed in 4.14.0-7 CWE-287
TI-2024-06609 CVE-2024-7141 · GHSA-6r56-4gv2-h4vx

CSRF in Gliffy

Priority LOW 26

Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery (CSRF) flaw.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.0021 Published 2025-02-20 Fixed in 4.14.0-7 CWE-352
TI-2024-09557 CVE-2024-10315 · GHSA-62gp-cqpw-rgh4

Insecure Configuration in Gliffy Online

Priority LOW 30

In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00337 Published 2024-11-11 Fixed in 4.14.0-6 CWE-942
TI-2012-02542 CVE-2012-2928 · GHSA-jvhg-gg3p-gmr7

The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian…

Priority LOW 34

The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03025 Published 2012-05-22 No fix listed CWE-264