CVE Watch—

CVE-2019-3398

Atlassian Confluence Server and Data Center Path Traversal Vulnerability

CVSS

—

No CVSS

EPSS

97.2%

p100

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

97.2%EPSS · 30 days97.2%

2026-06-302026-07-16

KEV catalog record

Product

Atlassian / Confluence Server and Data Center

Vulnerability

Atlassian Confluence Server and Data Center Path Traversal Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-3398

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2021-26084—

100.0%

KEV—80Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability—