Skip to contentAtlassian Confluence Data Center vulnerabilities
- atlassian bamboo, bamboo data center, bitbucket data center +14 more +16 moreh3. Summary
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira...CVE-2026-21589In KEVPublic exploitEPSS 99.7%9.3 Critical
- atlassian confluence data centerThis High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1,...CVE-2026-215887.1 High
- atlassian confluence data centerThis High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0,...CVE-2026-215867.1 High
- atlassian confluence data center, confluence server +1 moreThis Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration...CVE-2026-215808.6 High
- atlassian confluence data centerThis High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0...CVE-2026-215798.2 High
- atlassian confluence data centerThis High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0,...CVE-2026-215777.1 High
- atlassian confluence data center, confluence server +1 moreThis High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of...CVE-2025-221668.3 High
- atlassian confluence data center, confluence server +1 moreThis Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of...CVE-2024-217036.4 Medium
- atlassian confluence data center, confluence server +1 moreThis High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was...CVE-2024-216907.1 High
- atlassian confluence data center, confluence server +1 moreThis High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data...CVE-2024-216867.3 High
- atlassian confluence data center, confluence server, crucible +4 more +6 moreThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of...CVE-2024-21683Public exploitEPSS 88.3%7.2 High
- atlassian confluence data center, confluence server +1 moreThis High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence...CVE-2024-216778.3 High
- atlassian confluence data center, confluence server +1 moreThis High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data...CVE-2024-216788.5 High
- atlassian confluence data center, confluence server +1 moreRejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because...CVE-2023-22512EPSS 15.1%7.5 High
- atlassian confluence data center, confluence server +1 moreThis High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of...CVE-2024-216748.6 High
- atlassian confluence data center, confluence server +1 moreThis High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of...CVE-2024-216738.0 High
- atlassian confluence data center, confluence server +1 moreThis High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of...CVE-2024-216728.3 High
- atlassian confluence data center, confluence data center and server, confluence server +2 moreSummary of Vulnerability
A template injection vulnerability on older versions of Confluence Data...CVE-2023-22527In KEVPublic exploitEPSS 100.0%10.0 Critical
- atlassian confluence data center, confluence server +1 moreThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of...CVE-2023-225267.2 High
- atlassian confluence data center, confluence server +1 moreThis Template Injection vulnerability allows an authenticated attacker, including one with...CVE-2023-22522EPSS 12.9%9.0 Critical
- atlassian confluence data center, confluence data center and server, confluence server +2 moreAll versions of Confluence Data Center and Server are affected by this unexploited vulnerability....CVE-2023-22518In KEVPublic exploitEPSS 100.0%10.0 Critical
- atlassian confluence data center, confluence data center and server, confluence server +2 moreAtlassian has been made aware of an issue reported by a handful of customers where external...CVE-2023-22515In KEVPublic exploitEPSS 99.2%10.0 Critical
- atlassian confluence data center, confluence server +1 moreThis High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was...CVE-2023-225088.5 High
- atlassian confluence data center, confluence server +1 moreThis High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was...CVE-2023-225058.0 High
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server allow remote attackers who have read permissions...CVE-2023-225044.3 Medium
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers...CVE-2023-225035.3 Medium
- atlassian confluence server, confluence data center +1 moreThe Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5...CVE-2020-362905.4 Medium
- atlassian bamboo, bitbucket, crowd +19 more +21 moreA vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause...CVE-2022-261378.8 High
- atlassian bamboo, bitbucket, crowd +19 more +21 moreA vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to...CVE-2022-261369.8 Critical
- atlassian confluence server, confluence data center, confluence server/data center +2 moreIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists...CVE-2022-26134In KEVPublic exploitEPSS 100.0%9.8 Critical
- atlassian confluence data center, confluence server +1 moreAffected versions of Atlassian Confluence Server and Data Center allow users with a valid account...CVE-2021-391148.8 High
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server and Data Center allow authenticated local...CVE-2021-439407.8 High
- atlassian confluence server, confluence server and data center, confluence data center +2 moreIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists...CVE-2021-26084In KEVPublic exploitEPSS 100.0%9.8 Critical
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server allow remote attackers to view restricted...CVE-2021-26085In KEVPublic exploitEPSS 99.9%5.3 Medium
- atlassian confluence data center, confluence server +1 moreThe WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6...CVE-2021-26072EPSS 41.2%4.3 Medium
- atlassian confluence data center, confluence server +1 moreThe ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center...CVE-2020-294485.3 Medium
- atlassian confluence, confluence server, confluence data center +2 moreAtlassian Confluence Server and Data Center before version 7.5.1 allowed remote attackers with...CVE-2020-40274.7 Medium
- atlassian confluence, confluence data center, confluence server +2 moreThe usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5,...CVE-2019-204067.8 High
- atlassian confluence server, confluence data center +1 moreAtlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to...CVE-2018-202376.5 Medium