Known vulnerabilities in Confluence Data Center - page 10
Vendor:
Atlassian
Software:
Confluence Data Center
Software CPE:
cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
225
Public exploits:
28
Known exploited (KEV):
5
Breakdown by Severity Chart
10.2.18
9.2.25
10.2.19
9.2.26
10.2.17
9.2.24
10.2.8
9.2.18
10.2.15
9.2.23
9.2.22
10.2.14
10.2.13
9.2.21
1.0.0
3.0
9.2.20
10.2.11
10.2.10
9.2.19
9.2.17
10.1.2
10.2.7
10.2.6
9.2.15
10.2.3
9.2.14
8.5.31
10.2.2
9.2.13
10.2.1
9.2.12
8.5.30
10.2.0
9.2.11
8.5.29
9.2.10
8.5.28
10.1.1
10.1.0
9.2.9
8.5.27
9.2.8
10.0.3
9.0.3
10.0.2
9.5.4
9.5.3
9.2.7
8.5.26
8.5.25
10.0.1
8.5.24
9.5.2
9.2.6
9.2.5
8.5.23
9.5.1
9.5.0
8.5.22
9.2.4
9.4.1
9.3.2
8.5.21
9.2.3
9.4.0
9.2.2
8.5.20
9.3.1
8.5.19
9.2.1
7.19.30
8.5.18
9.2.0
8.9.8
7.19.29
8.5.17
9.1.1
9.1.0
8.9.7
8.5.16
7.19.28
8.9.6
8.5.15
7.19.27
9.0.2
9.0.0
8.5.14
7.19.26
9.0.1
8.9.5
7.19.25
8.5.12
8.9.4
7.19.24
8.9.3
8.5.11
8.9.2
8.5.10
7.19.23
7.19.22
8.5.9
8.9.1
8.5.8
8.9.0
7.19.21
8.8.1
7.19.20
8.5.7
8.8.0
8.5.6
7.19.19
7.19.18
8.5.5
8.7.2
8.5.4
7.19.17
8.7.1
8.7.0
8.6.2
8.4.5
8.1.4
8.6.1
8.5.3
7.19.16
8.6.0
8.4.4
8.3.4
7.19.15
8.5.2
8.4.3
8.3.3
8.5.1
7.19.14
7.19.12
8.5.0
8.4.2
7.13.20
8.4.1
7.19.11
7.13.19
8.4.0
8.3.2
8.3.1
8.3.0
8.2.3
8.2.2
8.2.1
8.2.0
8.1.3
8.1.1
8.1.0
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.20.3
7.20.2
7.20.1
7.20.0
7.19.10
7.19.9
7.19.8
7.19.7
7.19.6
7.19.5
7.19.4
7.19.3
7.19.2
7.19.1
7.19.0
7.18.3
7.18.2
7.17.5
7.16.5
7.15.3
7.14.4
7.13.18
7.13.17
7.13.16
7.13.15
7.13.14
7.13.13
7.13.12
7.13.11
7.13.9
7.13.8
7.12.5
7.12.4
7.12.3
7.12.2
7.12.1
7.12.0
7.11.6
7.11.3
7.11.2
7.11.1
7.11.0
7.10.2
7.10.1
7.10.0
7.9.3
7.9.1
7.9.0
7.8.3
7.8.1
7.8.0
7.7.4
7.7.3
7.7.2
7.6.3
7.6.2
7.6.1
7.6.0
7.5.2
7.5.1
7.5.0
7.4.18
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.2.2
7.2.1
7.2.0
7.1.2
7.1.1
7.1.0
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
6.15.10
6.15.9
6.15.8
6.15.7
6.15.6
6.15.4
6.15.2
6.15.1
6.14.3
6.14.2
6.14.1
6.14.0
6.13.23
6.13.21
6.13.20
6.13.19
6.13.18
6.13.17
6.13.15
6.13.13
6.13.12
6.13.11
6.13.10
6.13.9
6.13.8
6.13.7
6.13.6
6.13.5
6.13.4
6.13.3
6.13.2
6.13.1
6.13.0
6.12.4
6.12.3
6.12.2
6.12.1
6.12.0
6.11.2
6.11.1
6.11.0
6.10.3
6.10.2
6.10.1
6.10.0
6.9.3
6.9.1
6.9.0
6.8.5
6.8.3
6.8.2
6.8.1
6.8.0
6.7.3
6.7.2
6.7.1
6.7.0
6.6.17
6.6.16
6.6.15
6.6.14
6.6.13
6.6.12
6.6.11
6.6.10
6.6.9
6.6.8
6.6.7
6.6.6
6.6.5
6.6.4
6.6.3
6.6.2
6.6.1
6.6.0
6.5.3
6.5.2
6.5.1
6.5.0
6.4.3
6.4.2
6.4.1
6.4.0
6.3.4
6.3.3
6.3.2
6.3.1
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.10.9
5.10.8
5.10.7
5.10.6
5.10.4
5.10.3
5.10.2
5.10.1
5.10.0
5.9.14
5.9.12
5.9.11
5.9.10
5.9.9
5.9.8
5.9.7
5.9.6
5.9.5
5.9.4
5.9.3
5.9.2
5.9.1
5.8.18
5.8.17
5.8.16
5.8.15
5.8.14
5.8.13
5.8.10
5.8.9
5.8.8
5.8.6
5.8.5
5.8.4
5.8.2
5.7.6
5.7.5
5.7.4
5.7.3
5.7.1
5.7
5.6.6
5.6.5
5.6.4
5.6.3
5.6.1
5.5.7
5.5.6
5.5.3
5.5.2
5.5.1
5.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4
5.3.4
5.3.1
5.3
5.2.5
5.2.3
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1
5.0.3
5.0.2
5.0.1
5.0
4.3.7
4.3.6
4.3.5
4.3.3
4.3.2
4.3.1
4.3
4.2.13
4.2.12
4.2.11
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2
4.1.10
4.1.9
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1
4.0.7
4.0.5
4.0.4
4.0.3
4.0
3.5.17
3.5.16
3.5.13
3.5.11
3.5.9
3.5.7
3.5.6
3.5.5
3.5.4
3.5.3
3.5.2
3.5.1
3.5
3.4.9
3.4.8
3.4.7
3.4.6
3.4.5
3.4.3
3.4.2
3.4.1
3.4
3.3.3
3.3.1
3.3
3.2
3.1.2
3.1.1
3.1
3.0.2
3.0.1
2.10.4
2.9.3
2.8.3
2.7.4
2.6.3
2.2.10
2.2.9
2.2.8
2.2.7
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1
2.0.3
2.0.2
2.0.1
2.0
1.4.4
1.4.3
1.4.2
1.4.1
1.4
1.3.6
1.3.5
1.2.3
1.1.2
7.18.1
7.18.0
7.17.4
7.17.3
7.17.2
7.17.1
7.17.0
7.16.4
7.16.3
7.16.2
7.16.1
7.16.0
7.15.2
7.15.1
7.15.0
7.14.3
7.14.2
7.14.1
7.14.0
7.13.7
7.13.6
7.13.5
7.13.4
7.13.3
7.13.2
7.13.1
7.13.0
7.4.17
7.4.16
7.4.15
7.4.14
7.4.13
7.4.12
7.4.11
7.4.10
7.4.9
7.4.8
7.4.7
7.4.6
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
Vulnerabilities (225)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU89810 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-21678 |
CWE-79 | Low | 7.19.18, 8.5.5, 8.7.2, 8.8.0 | 24.05.2024 |
SB2024052461 |
||
| #VU89803 - Improper input validation CVE-2024-21683 |
CWE-20 | Medium | 7.19.22, 8.5.9, 8.9.1 | 24.05.2024 |
SB2024052424 |
||
| #VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262 |
CWE-918 | Medium | 7.19.24, 8.5.11, 8.9.3 | 24.05.2024 |
SB2024052420 SB2024052423 SB2024052708 and 76 more |
||
| #VU87744 - Out-of-bounds write CVE-2024-29133 |
CWE-787 | High | 7.19.23, 8.5.9, 8.9.1 | 22.03.2024 |
SB2024032169 SB2024032283 SB20240417122 and 40 more |
||
| #VU87706 - Out-of-bounds write CVE-2024-29131 |
CWE-787 | High | 7.19.23, 8.5.9, 8.9.1 | 21.03.2024 |
SB2024032169 SB2024032283 SB20240417122 and 36 more |
||
| #VU87705 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-21677 |
CWE-22 | Medium | 7.19.20, 8.5.7, 8.8.1 | 21.03.2024 |
SB2024032168 |
||
| #VU87614 - Server-Side Request Forgery (SSRF) CVE-2024-22259 |
CWE-918 | Medium | 7.19.23, 8.5.9, 8.9.1 | 19.03.2024 |
SB2024031918 SB2024040207 SB2024041660 and 39 more |
||
| #VU87607 - Improper Access Control CVE-2024-22257 |
CWE-284 | Medium | 7.19.22, 8.5.9, 8.9.1 | 19.03.2024 |
SB2024031915 SB2024041659 SB2024041660 and 26 more |
||
| #VU87510 - Improper input validation CVE-2024-24549 |
CWE-20 | Medium | 7.19.22, 8.5.9, 8.9.1 | 13.03.2024 |
SB2024031386 SB2024031879 SB2024031880 and 64 more |
||
| #VU87509 - Resource exhaustion CVE-2024-23672 |
CWE-400 | Medium | 7.19.22, 8.5.9, 8.9.1 | 13.03.2024 |
SB2024031386 SB2024032821 SB2024032824 and 49 more |
||
| #VU86992 - Allocation of Resources Without Limits or Throttling CVE-2024-21634 |
CWE-770 | Medium | 7.19.20, 8.5.7, 8.7.1, 8.8.0 | 04.03.2024 |
SB2024030419 SB2024031125 SB2024032143 and 18 more |
||
| #VU86983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-1597 |
CWE-89 | High | 7.19.21, 8.5.8, 8.9.0 | 04.03.2024 |
SB2024030405 SB2024030406 SB2024030427 and 47 more |
||
| #VU86859 - Improper Access Control CVE-2023-45859 |
CWE-284 | Medium | 7.19.22, 8.5.9, 8.9.0 | 27.02.2024 |
SB2024022773 SB2024052426 SB2024121109 |
||
| #VU86695 - Server-Side Request Forgery (SSRF) CVE-2024-22243 |
CWE-918 | Medium | 7.19.23, 8.5.9, 8.9.1 | 21.02.2024 |
SB2024022140 SB2024030406 SB2024030529 and 45 more |
||
| #VU85441 - Exposure of sensitive information to an unauthorized actor CVE-2024-21674 |
CWE-200 | Medium | 7.19.18, 8.5.5, 8.7.2 | 16.01.2024 |
SB2024011640 |
||
| #VU85440 - Improper input validation CVE-2024-21673 |
CWE-20 | Low | 7.19.18, 8.5.5, 8.7.2 | 16.01.2024 |
SB2024011640 |
||
| #VU85439 - Improper input validation CVE-2024-21672 |
CWE-20 | High | 7.19.18, 8.5.5, 8.7.2 | 16.01.2024 |
SB2024011640 |
||
| #VU85434 - Improper input validation CVE-2023-22526 |
CWE-20 | Medium | 7.19.17, 8.5.5, 8.7.2 | 16.01.2024 |
SB2024011640 |
||
| #VU81726 - Integer overflow CVE-2023-36478 |
CWE-190 | Medium | 7.19.20, 8.5.7, 8.8.1 | 10.10.2023 |
SB2023101018 SB2023102640 SB2023103106 and 53 more |
||
| #VU80762 - Resource exhaustion CVE-2023-41835 |
CWE-400 | Medium | 7.19.18, 8.5.5, 8.7.2, 8.8.0 | 13.09.2023 |
SB2023091364 SB2023110308 SB2023113020 and 7 more |
Showing elements 181 - 200 out of 225