What’s Vulnerable › Vulnerabilities

CVE-2016-4317

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-10 · updated 2026-06-17
• Weakness: CWE-79

Description

Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.

Affected products

• Atlassian Confluence: through 5.9.10

References

• http://www.securityfocus.com/bid/97513
• https://confluence.atlassian.com/doc/confluence-5-9-11-release-notes-827123763.html
• https://jira.atlassian.com/browse/CONF-42713
• https://jira.atlassian.com/browse/CONFSERVER-42713
• http://www.securityfocus.com/bid/97513
• https://confluence.atlassian.com/doc/confluence-5-9-11-release-notes-827123763.html
• https://jira.atlassian.com/browse/CONF-42713
• https://jira.atlassian.com/browse/CONFSERVER-42713

Get alerted when CVE-2016-4317 or the next vulnerability affects your stack