All vulnerabilities

Servers and applications

CVE-2016-6668

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating with HipChat instances by reading unspecified pages.

Severity
High 7.5
Published
23 Jan 2017
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
ConfluenceServers and applications · cpe:a:atlassian:confluence_server
  • Version 5.10.3
  • Version 5.10.2
  • Version 5.10.1
  • Version 5.10.0
All 17 release lines
  • Version 5.5.0
  • Version 5.9.1
  • Version 5.9.2
  • Version 5.9.3
  • Version 5.9.4
  • Version 5.9.5
  • Version 5.9.6
  • Version 5.9.7
  • Version 5.9.8
  • Version 5.9.9
  • Version 5.9.10
  • Version 5.9.11
  • Version 5.9.12
  • Version 5.10.0
  • Version 5.10.1
  • Version 5.10.2
  • Version 5.10.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-6668
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-6668