CO
DevOps
Confluence
On CISA KEVExploited in the wildRansomware-linked
71
CVEs
10
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 11High 28Medium 29Low 0
Watch
Add Confluence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22527 RansomwareIn wildKEV | 9.8 | Jan 16 | Atlassian Confluence Data Center and Server Template Injection Vulnerability Affected: >= 8.0.0; >= 8.1.0; >= 8.2.0; >= 8.3.0; >= 8.4.0; >= 8.5.0; +3 more |
| CVE-2023-22518 RansomwareIn wildKEV | 9.8 | Oct 31 | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Affected: >= 1.0.0 |
| CVE-2023-22515 RansomwareIn wildKEV | 9.8 | Oct 4 | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Affected: >= 8.0.0; >= 8.0.1; >= 8.0.2; >= 8.0.3; >= 8.1.3; >= 8.1.4; +12 more |
| CVE-2022-26138 In wildKEV | 9.8 | Jul 20 | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability Affected: All versions, or not specified |
| CVE-2022-26134 RansomwareIn wildKEV | 9.8 | Jun 3 | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Affected: next of 1.3.0 before unspecified; before 7.4.17; 7.13.0 before unspecified; before 7.13.7; 7.14.0 before unspecified; before 7.14.3; +8 more |
| CVE-2021-26084 RansomwareIn wildKEV | 9.8 | Aug 30 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Affected: before 6.13.23; 6.14.0 before unspecified; before 7.4.11; 7.5.0 before unspecified; before 7.11.6; 7.12.0 before unspecified; +1 more |
| CVE-2019-3396 RansomwareIn wildKEV | 9.8 | Mar 25 | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Affected: before 6.6.12; 6.7.0 before unspecified; before 6.12.3; next of 6.13.0 before unspecified; before 6.13.3; next of 6.14.0 before unspecified; +1 more |
| CVE-2019-3398 In wildKEV | 8.8 | Apr 18 | Atlassian Confluence Server and Data Center Path Traversal Vulnerability Affected: 2.0.0 before unspecified; before 6.6.13; 6.7.0 before unspecified; before 6.12.4; 6.13.0 before unspecified; before 6.13.4; +4 more |
| CVE-2026-21589 In wildKEV | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Affected: All other versions |
| CVE-2021-26085 RansomwareIn wildKEV | 5.3 | Aug 3 | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Affected: before 7.4.10; 7.5.0 before unspecified; before 7.12.3 |
Showing 10