Known vulnerabilities in Confluence Server - page 6

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:atlassian_confluence_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 117
Public exploits: 16
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Confluence Server Confluence Server is affected by 117 known vulnerabilities: 2 critical, 17 high, 74 medium, 24 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78553 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-22505
CWE-94 Low
No
No
8.3.2, 8.4.0 24.07.2023 SB2023072414
#VU78551 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-22508
CWE-94 Medium
No
No
7.19.8, 8.2.0 24.07.2023 SB2023072410
#VU63958 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-26134
CWE-94 Critical
Available
Exploited
7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.1 03.06.2022 SB2022060301
#VU57077 - Missing Authorization
CVE-2021-26085
CWE-862 Medium
Available
Exploited
7.4.10, 7.12.3 06.10.2021 SB2021080327
#VU56249 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26084
CWE-94 High
Available
Exploited
6.13.23, 7.4.11, 7.11.6, 7.12.5 01.09.2021 SB2021090135
#VU51514 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-14175
CWE-79 Medium
No
No
7.4.3, 7.5.2 16.03.2021 SB2020072429
#VU51513 - Unrestricted Upload of File with Dangerous Type
CVE-2020-29450
CWE-434 Medium
No
No
7.2.0 16.03.2021 SB2021011914
#VU51512 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-4027
CWE-94 Low
No
No
7.4.5, 7.5.1 16.03.2021 SB2020070178
#VU23806 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2019-15006
CWE-300 Low
No
No
6.13.10, 6.15.10, 7.0.5, 7.1.2 24.12.2019 SB2019122402
#VU47860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-3396
CWE-22 High
Available
Exploited
6.6.12, 6.10.3, 6.12.3, 6.13.3, 6.14.2, 6.15.1 25.03.2019 SB2019032524
#VU14023 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-13389
CWE-451 Low
No
No
6.6.1, 6.7.0 26.07.2018 SB2018072619
#VU10409 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18086
CWE-79 Low
No
No
- 07.02.2018 SB2018020816
#VU10413 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18082
CWE-79 Low
No
No
- 07.02.2018 SB2018020816
#VU10416 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18085
CWE-79 Low
No
No
- 07.02.2018 SB2018020816
#VU10417 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18084
CWE-79 Low
No
No
- 07.02.2018 SB2018020816
#VU10419 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18083
CWE-79 Low
No
No
- 07.02.2018 SB2018020816
#VU10415 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18081
CWE-79 Low
No
No
- 07.02.2018 SB2018020816


Showing elements 101 - 120 out of 117