Known vulnerabilities in Confluence Server - page 2

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:atlassian_confluence_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 117
Public exploits: 16
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Confluence Server Confluence Server is affected by 117 known vulnerabilities: 2 critical, 17 high, 74 medium, 24 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111165 - Improper Access Control
CVE-2025-48734
CWE-284 Medium
No
No
8.5.24, 9.2.6, 9.5.2, 10.0.3 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU109240 - Configuration
CVE-2025-27820
CWE-16 Medium
No
No
9.2.6, 9.5.2 16.05.2025 SB2025051604
SB2025060628
SB2025063009
and 10 more
#VU107996 - Error Handling
CVE-2025-31650
CWE-388 Medium
Available
No
8.5.22, 9.2.4, 9.4.1 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 38 more
#VU106926 - Resource Management Errors
CVE-2024-57699
CWE-399 Medium
No
No
8.5.22, 9.2.4, 9.4.1 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 63 more
#VU105881 - Security Features
CVE-2025-22228
CWE-254 Low
No
No
8.5.23, 9.2.5, 9.5.1 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU103770 - Improper input validation
CVE-2025-24970
CWE-20 Medium
No
No
8.5.20, 9.2.2, 9.3.2 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337
CWE-264 High
No
No
8.5.19, 9.2.1 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379
CWE-264 Medium
Available
No
8.5.19, 9.2.1 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU100095 - Memory corruption
CVE-2024-47072
CWE-119 Medium
No
No
8.5.21, 9.2.2, 9.3.2 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819
CWE-22 Medium
Available
No
7.19.30, 8.5.18, 9.1.1 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98597 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
7.19.25, 8.5.11, 8.9.3 15.10.2024 SB20241015104
#VU98024 - Improper input validation
CVE-2024-47561
CWE-20 High
No
No
7.19.30, 8.5.18, 8.9.8, 9.1.1 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU97456 - Deserialization of Untrusted Data
CVE-2024-22871
CWE-502 Medium
No
No
7.19.21, 8.5.8 18.09.2024 SB2024091809
SB2024031556
SB2024031557
and 3 more
#VU97224 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38816
CWE-22 Medium
Available
No
7.19.29, 8.5.17, 8.9.8, 9.1.1 12.09.2024 SB2024091290
SB20241014121
SB20241015124
and 24 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
7.19.26, 8.5.15, 8.9.4, 9.0.1 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU87615 - Resource exhaustion
CVE-2023-52428
CWE-400 Medium
No
No
7.19.23, 8.5.11, 8.6.2, 8.7.2, 8.9.3 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710
CWE-835 Medium
No
No
7.19.25, 8.5.12, 8.9.4 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129
CWE-185 Medium
No
No
7.19.26 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU65655 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-10172
CWE-611 Medium
No
No
8.5.21, 9.2.3, 9.4.0 21.07.2022 SB2022072128
SB2021021828
SB2023042803
and 18 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785
CWE-22 Medium
No
No
7.19.26, 8.0.0 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more


Showing elements 21 - 40 out of 117