Atlassian Confluence vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
13 matching records
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsPatch nowKEVEPSS 99.66%Oct 5, 2026
- UnknownConfluence Data Center and Server Remote Code ExecutionPatch nowKEVEPSS 88.27%May 23, 2024
- Critical9.8Atlassian Confluence Data Center and Server Template Injection VulnerabilityPatch nowKEVEPSS 99.98%Jan 15, 2024
- Critical9.8Atlassian Confluence Data Center and Server Improper Authorization VulnerabilityPatch nowKEVEPSS 100.00%Oct 31, 2023
- Critical9.8Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityPatch nowKEVEPSS 99.22%Oct 4, 2023
- Critical9.8Atlassian Questions For Confluence App Hard-coded Credentials VulnerabilityPatch nowKEVEPSS 98.24%Jul 20, 2022
- Critical9.8Atlassian Confluence Server and Data Center Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Mar 6, 2022
- Critical9.8Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection VulnerabilityPatch nowKEVEPSS 100.00%Aug 30, 2021
- UnknownAtlassian Confluence and Data Center Widget Connector VulnerabilityPatch nowKEVAug 17, 2021
- Medium5.3Atlassian Confluence Server Pre-Authorization Arbitrary File Read VulnerabilityPatch nowKEVEPSS 99.94%Aug 2, 2021
- Medium4.3Atlassian Confluence Server and Data Center Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 41.22%Apr 1, 2021
- High8.8Atlassian Confluence Server and Data Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.03%Apr 18, 2019
- Critical9.8Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 99.91%Mar 25, 2019
Sort
13 records