Skip to content

Atlassian Confluence Server vulnerabilities

atlassian confluence data center, confluence server +1 more This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of... CVE-2025-22166 8.3 HighOctober 21, 2025
atlassian confluence data center, confluence server +1 more This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of... CVE-2024-21703 6.4 MediumNovember 27, 2024
atlassian confluence data center, confluence server +1 more This High severity Reflected XSS and CSRF (Cross-Site Request Forgery) vulnerability was... CVE-2024-21690 7.1 HighAugust 21, 2024
atlassian confluence data center, confluence server +1 more This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data... CVE-2024-21686 7.3 HighJuly 16, 2024
atlassian confluence data center, confluence server, crucible +4 more +6 more This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of... CVE-2024-21683 Public exploit EPSS 88.3% 7.2 HighMay 21, 2024
atlassian confluence data center, confluence server +1 more This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence... CVE-2024-21677 8.3 HighMarch 19, 2024
atlassian confluence data center, confluence server +1 more This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data... CVE-2024-21678 8.5 HighFebruary 20, 2024
atlassian confluence data center, confluence server +1 more Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because... CVE-2023-22512 EPSS 15.1% 7.5 HighJanuary 16, 2024
atlassian confluence data center, confluence server +1 more This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of... CVE-2024-21674 8.6 HighJanuary 16, 2024
atlassian confluence data center, confluence server +1 more This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of... CVE-2024-21673 8.0 HighJanuary 16, 2024
atlassian confluence data center, confluence server +1 more This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of... CVE-2024-21672 8.3 HighJanuary 16, 2024
atlassian confluence data center, confluence data center and server, confluence server +2 more Summary of Vulnerability A template injection vulnerability on older versions of Confluence Data... CVE-2023-22527 In KEVPublic exploit EPSS 100.0% 10.0 CriticalJanuary 16, 2024
atlassian confluence data center, confluence server +1 more This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of... CVE-2023-22526 7.2 HighJanuary 16, 2024
atlassian confluence data center, confluence server +1 more This Template Injection vulnerability allows an authenticated attacker, including one with... CVE-2023-22522 EPSS 12.9% 9.0 CriticalDecember 6, 2023
atlassian confluence data center, confluence data center and server, confluence server +2 more All versions of Confluence Data Center and Server are affected by this unexploited vulnerability.... CVE-2023-22518 In KEVPublic exploit EPSS 100.0% 10.0 CriticalOctober 31, 2023
atlassian confluence data center, confluence data center and server, confluence server +2 more Atlassian has been made aware of an issue reported by a handful of customers where external... CVE-2023-22515 In KEVPublic exploit EPSS 99.2% 10.0 CriticalOctober 4, 2023
atlassian confluence data center, confluence server +1 more This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was... CVE-2023-22508 8.5 HighJuly 18, 2023
atlassian confluence data center, confluence server +1 more This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was... CVE-2023-22505 8.0 HighJuly 18, 2023
atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions... CVE-2023-22504 4.3 MediumMay 25, 2023
atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers... CVE-2023-22503 5.3 MediumMay 1, 2023
atlassian confluence server, confluence data center +1 more The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5... CVE-2020-36290 5.4 MediumJuly 26, 2022
atlassian bamboo, bitbucket, crowd +19 more +21 more A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause... CVE-2022-26137 8.8 HighJuly 20, 2022
atlassian bamboo, bitbucket, crowd +19 more +21 more A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to... CVE-2022-26136 9.8 CriticalJuly 20, 2022
atlassian confluence server, confluence data center, confluence server/data center +2 more In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists... CVE-2022-26134 In KEVPublic exploit EPSS 100.0% 9.8 CriticalJune 3, 2022
atlassian confluence data center, confluence server +1 more Affected versions of Atlassian Confluence Server and Data Center allow users with a valid account... CVE-2021-39114 8.8 HighApril 5, 2022
atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server and Data Center allow authenticated local... CVE-2021-43940 7.8 HighFebruary 15, 2022
atlassian confluence server, confluence server and data center, confluence data center +2 more In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists... CVE-2021-26084 In KEVPublic exploit EPSS 100.0% 9.8 CriticalAugust 30, 2021
atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server allow remote attackers to view restricted... CVE-2021-26085 In KEVPublic exploit EPSS 99.9% 5.3 MediumAugust 3, 2021
atlassian confluence server Affected versions of Confluence Server before 7.11.0 allow attackers to identify internal hosts... CVE-2020-29445 4.3 MediumMay 7, 2021
atlassian confluence server, confluence data center +1 more Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject... CVE-2020-29444 5.4 MediumMay 7, 2021
atlassian confluence data center, confluence server +1 more The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6... CVE-2021-26072 EPSS 41.2% 4.3 MediumApril 1, 2021
atlassian confluence data center, confluence server +1 more The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center... CVE-2020-29448 5.3 MediumFebruary 18, 2021
atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact... CVE-2020-29450 6.5 MediumJanuary 19, 2021
atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject... CVE-2020-14175 5.4 MediumJuly 24, 2020
atlassian confluence, confluence server, confluence data center +2 more Atlassian Confluence Server and Data Center before version 7.5.1 allowed remote attackers with... CVE-2020-4027 4.7 MediumJuly 1, 2020
atlassian confluence server The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through... CVE-2019-20102 6.1 MediumApril 22, 2020
atlassian confluence, confluence data center, confluence server +2 more The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5,... CVE-2019-20406 7.8 HighFebruary 6, 2020
atlassian confluence, confluence server +1 more There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in... CVE-2019-15006 6.5 MediumDecember 19, 2019
atlassian confluence, confluence server +1 more There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center... CVE-2019-3394 Public exploit EPSS 11.0% 8.8 HighAugust 29, 2019
atlassian application links, crowd, crucible +5 more +7 more Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0... CVE-2018-20239 5.4 MediumApril 30, 2019
atlassian confluence, confluence server and data center, confluence server +2 more Confluence Server and Data Center had a path traversal vulnerability in the... CVE-2019-3398 In KEVPublic exploit EPSS 97.0% 8.8 HighApril 18, 2019
atlassian confluence server, confluence server and data server +1 more The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed... CVE-2019-3396 In KEVPublic exploit EPSS 99.9% 9.8 CriticalMarch 25, 2019
atlassian confluence, confluence server +1 more The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the... CVE-2019-3395 9.8 CriticalMarch 25, 2019
atlassian confluence server, confluence data center +1 more Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to... CVE-2018-20237 6.5 MediumFebruary 13, 2019
atlassian confluence server Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read... CVE-2017-7415 7.5 HighApril 27, 2017
atlassian confluence server, jira integration for hipchat +1 more The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before... CVE-2016-6668 7.5 HighJanuary 23, 2017
atlassian confluence server Cross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6... CVE-2012-6342 6.8 MediumMay 13, 2014
atlassian jira, gliffy, atlassian confluence server +2 more The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does... CVE-2012-2928 6.4 MediumMay 22, 2012
atlassian bamboo, confluence, crowd +4 more +6 more Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10;... CVE-2012-2926 Public exploit EPSS 66.3% 9.1 CriticalMay 22, 2012