Known vulnerabilities in Confluence Server - page 4

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:atlassian_confluence_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 117
Public exploits: 16
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Confluence Server Confluence Server is affected by 117 known vulnerabilities: 2 critical, 17 high, 74 medium, 24 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94796 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-21686
CWE-79 Low
No
No
7.19.22, 8.5.9, 8.9.1 28.07.2024 SB2024072804
#VU89803 - Improper input validation
CVE-2024-21683
CWE-20 Medium
Available
No
7.19.22, 8.5.9, 8.9.1 24.05.2024 SB2024052424
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262
CWE-918 Medium
No
No
7.19.24, 8.5.11, 8.9.3 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU88665 - Improper input validation
CVE-2024-21085
CWE-20 Low
No
No
7.19.25, 8.5.12 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88668 - Improper input validation
CVE-2024-21094
CWE-20 Low
No
No
7.19.25, 8.5.12 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU87744 - Out-of-bounds write
CVE-2024-29133
CWE-787 High
No
No
7.19.23, 8.5.9, 8.9.1 22.03.2024 SB2024032169
SB2024032283
SB20240417122
and 40 more
#VU87706 - Out-of-bounds write
CVE-2024-29131
CWE-787 High
No
No
7.19.23, 8.5.9, 8.9.1 21.03.2024 SB2024032169
SB2024032283
SB20240417122
and 36 more
#VU87705 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-21677
CWE-22 Medium
No
No
7.19.20, 8.5.7 21.03.2024 SB2024032168
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259
CWE-918 Medium
No
No
7.19.23, 8.5.9, 8.9.1 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU87607 - Improper Access Control
CVE-2024-22257
CWE-284 Medium
No
No
7.19.22, 8.5.9, 8.9.1 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU87510 - Improper input validation
CVE-2024-24549
CWE-20 Medium
Available
No
7.19.22, 8.5.9, 8.9.1 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87509 - Resource exhaustion
CVE-2024-23672
CWE-400 Medium
No
No
7.19.22, 8.5.9, 8.9.1 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU86992 - Allocation of Resources Without Limits or Throttling
CVE-2024-21634
CWE-770 Medium
No
No
7.19.20, 8.5.7, 8.7.1, 8.8.0 04.03.2024 SB2024030419
SB2024031125
SB2024032143
and 18 more
#VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-1597
CWE-89 High
No
No
7.19.21, 8.5.8, 8.9.0 04.03.2024 SB2024030405
SB2024030406
SB2024030427
and 47 more
#VU86859 - Improper Access Control
CVE-2023-45859
CWE-284 Medium
No
No
7.19.22, 8.5.9, 8.9.0 27.02.2024 SB2024022773
SB2024052426
SB2024121109
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243
CWE-918 Medium
Available
No
7.19.23, 8.5.9, 8.9.1 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU85441 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21674
CWE-200 Medium
No
No
7.19.18, 8.5.5, 8.7.2 16.01.2024 SB2024011640
#VU85440 - Improper input validation
CVE-2024-21673
CWE-20 Low
No
No
7.19.18, 8.5.5, 8.7.2 16.01.2024 SB2024011640
#VU81726 - Integer overflow
CVE-2023-36478
CWE-190 Medium
No
No
7.19.20, 8.5.7 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80762 - Resource exhaustion
CVE-2023-41835
CWE-400 Medium
No
No
7.19.18, 8.5.5, 8.7.2, 8.8.0 13.09.2023 SB2023091364
SB2023110308
SB2023113020
and 7 more


Showing elements 61 - 80 out of 117