Atlassian

Confluence Data Center

39 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-22512

  • EPSS 14.19%
  • Veröffentlicht 16.01.2024 18:15:09
  • Zuletzt bearbeitet 12.05.2025 16:15:18

This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server. With a CVSS Score of 7.5, this vulnerability allows an unauthenticated attacker to cause a resource to be unavailable for i...

7.5

CVE-2024-21674

  • EPSS 1.77%
  • Veröffentlicht 16.01.2024 05:15:08
  • Zuletzt bearbeitet 21.11.2024 08:54:50

This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server. Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.6 and a CVSS Vector of CVSS:3.0/AV:N/AC:L/PR:N/UI:N...

8.8

CVE-2024-21673

  • EPSS 1.5%
  • Veröffentlicht 16.01.2024 05:15:08
  • Zuletzt bearbeitet 03.06.2025 19:15:36

This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server. Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.0 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:H/UI:...

8.8

CVE-2024-21672

  • EPSS 1.36%
  • Veröffentlicht 16.01.2024 05:15:08
  • Zuletzt bearbeitet 02.06.2025 16:15:26

This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server. Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.3 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:N/UI:R/...

9.8

CVE-2023-22527

Warnung Exploit
  • EPSS 99.98%
  • Veröffentlicht 16.01.2024 05:15:08
  • Zuletzt bearbeitet 24.10.2025 13:38:56

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supporte...

8.8

CVE-2023-22526

  • EPSS 1.57%
  • Veröffentlicht 16.01.2024 05:15:07
  • Zuletzt bearbeitet 21.11.2024 07:44:58

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrar...

8.8

CVE-2023-22522

Warnung
  • EPSS 12.84%
  • Veröffentlicht 06.12.2023 05:15:09
  • Zuletzt bearbeitet 25.02.2026 18:16:54

This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Using this approach, an attacker is able to achieve Remote Code Execution (RCE) on an aff...

9.8

CVE-2023-22518

Warnung Exploit
  • EPSS 100%
  • Veröffentlicht 31.10.2023 15:15:08
  • Zuletzt bearbeitet 24.10.2025 13:38:59

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account....

9.8

CVE-2023-22515

Warnung Exploit
  • EPSS 99.16%
  • Veröffentlicht 04.10.2023 14:15:10
  • Zuletzt bearbeitet 25.03.2026 17:40:00

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Conf...

8.8

CVE-2023-22508

  • EPSS 2.17%
  • Veröffentlicht 18.07.2023 23:15:09
  • Zuletzt bearbeitet 21.11.2024 07:44:57

This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of Confluence Data Center & Server. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 8.5, allows an authenticated...