All vulnerabilities

Servers and applications

CVE-2019-15006

There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence Data Center communicated with the Companion application via the…

Severity
Medium 6.5
Published
19 Dec 2019
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
6.15.10, 7.0.5, 7.1.2
Sources
NVD

Affected software

SoftwareAffected versions
ConfluenceServers and applications · cpe:a:atlassian:confluence_server
  • From 6.14.0 before 6.15.10
  • From 7.0.1 before 7.0.5
  • From 7.1.0 before 7.1.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-15006
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-15006