Known vulnerabilities in Confluence Data Center - page 2

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 28
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Confluence Data Center Confluence Data Center is affected by 225 known vulnerabilities: 2 critical, 26 high, 170 medium, 27 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150176 - Integer overflow
CVE-2026-73086
CWE-190 Medium
No
No
9.2.22, 10.2.15 16.09.2026 SB2026091625
SB2026091636
SB2026091637
and 3 more
#VU146453 - Improper input validation
CVE-2026-59639
CWE-20 Medium
No
No
9.2.24, 10.2.17 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146464 - Improper input validation
CVE-2026-59650
CWE-20 Medium
No
No
9.2.24, 10.2.17 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 7 more
#VU146439 - Improper Verification of Cryptographic Signature
CVE-2026-12816
CWE-347 Medium
No
No
9.2.24, 10.2.17 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146443 - Uncontrolled Recursion
CVE-2026-13506
CWE-674 Medium
No
No
9.2.24, 10.2.17 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 10 more
#VU146432 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-0603
CWE-89 Medium
No
No
9.2.23, 10.2.15 31.08.2026 SB2026083166
SB2026083172
SB2026083177
and 1 more
#VU139375 - Uncontrolled Recursion
CVE-2026-73566
CWE-674 Medium
No
No
9.2.22, 10.2.14 26.07.2026 SB2026072605
SB2026091637
SB2026091642
and 2 more
#VU139097 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45623
CWE-22 Medium
Available
No
9.2.22, 10.2.15 22.07.2026 SB2026072247
SB2026083177
SB2026083181
and 1 more
#VU135919 - Selection of Less-Secure Algorithm During Negotiat
CVE-2026-54291
CWE-757 Medium
No
No
9.2.11, 10.2.0 30.06.2026 SB2026063034
SB2026073042
SB2026080425
and 7 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276
CWE-670 Low
No
No
9.2.23, 10.2.15 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 11 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404
CWE-670 Medium
No
No
9.2.23, 10.2.15 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 13 more
#VU135794 - Inefficient Algorithmic Complexity
CVE-2026-59880
CWE-407 Medium
No
No
9.2.24, 10.2.17 29.06.2026 SB2026062999
SB2026080424
SB2026091638
and 6 more
#VU135792 - Integer overflow
CVE-2026-59879
CWE-190 Medium
No
No
9.2.24, 10.2.17 29.06.2026 SB2026062999
SB2026080424
SB2026091638
and 6 more
#VU135768 - Allocation of Resources Without Limits or Throttling
CVE-2026-59873
CWE-770 Medium
No
No
9.2.22, 10.2.14 29.06.2026 SB2026062990
SB20260728122
SB2026072972
and 9 more
#VU135767 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-59874
CWE-835 Medium
No
No
9.2.22, 10.2.14 29.06.2026 SB2026062989
SB20260728122
SB2026072972
and 7 more
#VU135766 - Type conversion
CVE-2026-59871
CWE-704 Medium
No
No
9.2.22, 10.2.14 29.06.2026 SB2026062989
SB2026083177
SB2026083182
and 2 more
#VU132273 - Incorrect Calculation
CVE-2025-14813
CWE-682 Medium
No
No
9.2.23, 10.2.15 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 21 more
#VU123629 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-29786
CWE-59 High
Available
No
9.2.22, 10.2.14 09.03.2026 SB2026030915
SB2026050668
SB2026060237
and 4 more
#VU123432 - Uncontrolled Recursion
CVE-2026-27601
CWE-674 Medium
No
No
9.2.22, 10.2.14 03.03.2026 SB2026030327
SB2026031519
SB2026031520
and 9 more
#VU64030 - Resource exhaustion
CVE-2021-44906
CWE-400 High
No
No
9.2.23 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 53 more


Showing elements 21 - 40 out of 225