Known vulnerabilities in Confluence Server 7.3.5 - page 3

Vendor: Atlassian
Version: 7.3.5
Software CPE: cpe:2.3:a:atlassian:atlassian_confluence_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 47
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Confluence Server version 7.3.5 Confluence Server 7.3.5 is affected by 47 vulnerabilities: 1 critical, 8 high, 28 medium, 10 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83896 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-22522
CWE-94 High
No
No
7.19.17, 8.4.5, 8.5.4 06.12.2023 SB2023120608
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
7.19.17, 8.3.4, 8.4.5, 8.5.4, 8.6.2 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635
CWE-681 Medium
No
No
7.19.17, 8.3.4, 8.4.5, 8.5.4, 8.6.2 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Public exploit available
No
7.13.18, 7.19.10, 8.3.1, 8.4.5, 8.5.4 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU65499 - Improper input validation
CVE-2021-31684
CWE-20 Medium
No
No
7.19.17, 8.3.4, 8.4.5, 8.5.4, 8.6.2 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU63958 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-26134
CWE-94 Critical
Public exploit available
Exploited
7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.1 03.06.2022 SB2022060301
#VU56249 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26084
CWE-94 High
Public exploit available
Exploited
6.13.23, 7.4.11, 7.11.6, 7.12.5 01.09.2021 SB2021090135


Showing elements 41 - 60 out of 47