Login Request a demo
CO
Product
Confluence
by Mattermost · last CVE Feb 6, 2026
14
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 0High 4Medium 8Low 2
Severity
All severities14Critical0High4Medium8Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Confluence to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-48731
6.4
0%
Aug 11
Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin
Affected: before 1.5.0
CVE-2025-53514
5.9
0%
Aug 11
Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin
Affected: before 1.5.0
CVE-2025-13523
5.4
0%
Feb 6
Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow
Affected: 1.0.0 before 1.7.0
CVE-2025-8285
5.3
0%
Aug 11
Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin
Affected: before 1.5.0
CVE-2025-54478
5.3
0%
Aug 11
Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin
Affected: before 1.5.0
CVE-2025-54458
5.0
0%
Aug 11
Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin
Affected: before 1.5.0
CVE-2025-53910
4.0
0%
Aug 11
Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin
Affected: before 1.5.0
CVE-2025-44001
4.0
0%
Aug 11
Unauthorized Channel Subscription Read in Mattermost Confluence Plugin
Affected: before 1.5.0
Showing 8