📦

gliffy

Vendor: gliffy

Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 3 Total Indexed
Avg. EPSS 3.02% Exploit Prob.
Latest CVE CVE-2012-2928 May 22

Security Vulnerability Index

Page 1 / 1
6.4 CVSS

The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.

EPSS: 3.02%