CVE-2019-3396 CISA KEV · Actively exploitedLinked to ransomware
Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
CVSS score
—
EPSS probability
%99.9
Risk score
—
Published
5 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Atlassian Confluence Widget Connector Macro - SSTI
Makefile Go / Python
Atlassian Confluence Widget Connector Macro - Velocity Template Injection (Metasploit)
Makefile Go / Python
Nuclei: Atlassian Confluence Server - Path Traversal
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2026-21589 Actively exploitedCVE-2026-21589
Workaround Public Exploits:6EPSS %13
8.8
CVE-2026-21571OS command injection in Atlassian Bamboo
Patch status unknownEPSS %1
8.8
CVE-2026-21570Code injection in Atlassian Bamboo
Patch status unknownEPSS %1
8.0
CVE-2026-21575Code injection in Atlassian Sourcetree
Patch status unknownEPSS %1
8.6
CVE-2026-21580Vulnerability in Atlassian Confluence Data Center
Patch status unknownEPSS %1
8.8
CVE-2026-21582Vulnerability in Atlassian Crowd Data Center
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2019-3396"