Known vulnerabilities in Confluence Data Center - page 3

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 180
Public exploits: 26
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Confluence Data Center Confluence Data Center is affected by 180 known vulnerabilities: 2 critical, 21 high, 131 medium, 26 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498
CWE-200 Low
No
No
9.2.21, 10.2.13 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 18 more
#VU131107 - Resource exhaustion
CVE-2026-45149
CWE-400 Medium
No
No
10.2.10 12.05.2026 SB2026051222
SB2026061993
SB2026061994
and 2 more
#VU130215 - Resource exhaustion
CVE-2026-42587
CWE-400 Medium
No
No
9.2.21, 10.2.13 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 12 more
#VU128397 - Improper input validation
CVE-2026-33750
CWE-20 Medium
No
No
9.2.20, 10.2.10 28.04.2026 SB20260428215
SB20260428223
SB2026042934
and 8 more
#VU128350 - Inefficient Regular Expression Complexity
CVE-2025-66020
CWE-1333 Medium
No
No
9.2.19, 10.2.10 28.04.2026 SB2026042888
SB20260428150
#VU126872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-31802
CWE-22 Low
Available
No
9.2.19, 10.2.10 22.04.2026 SB20260422243
SB20260428143
SB2026050670
and 3 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483
CWE-116 Medium
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 19 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487
CWE-532 Medium
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 20 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880
CWE-444 Medium
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 18 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145
CWE-295 Low
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 17 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146
CWE-327 Medium
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 28 more
#VU124772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22029
CWE-79 Low
No
No
9.2.19, 10.2.10 01.04.2026 SB2026040154
SB2026040164
SB2026041309
and 10 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870
CWE-444 Medium
Available
No
9.2.19, 10.2.10 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more
#VU123913 - Improper Access Control
CVE-2024-29371
CWE-284 Medium
No
No
9.2.19, 10.2.10 12.03.2026 SB2026031212
SB2026031213
SB2026031310
and 28 more
#VU123491 - Memory corruption
CVE-2026-29062
CWE-119 Medium
No
No
10.2.11 04.03.2026 SB2026030413
SB2026060232
SB2026060234
and 3 more
#VU123172 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-26960
CWE-22 Medium
No
No
9.2.19, 10.2.10 24.02.2026 SB2026022432
SB20260428166
SB2026042935
and 2 more
#VU122999 - Improper Authorization
CVE-2026-24734
CWE-285 Medium
No
No
9.2.20, 10.2.11 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 24 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639
CWE-754 Medium
Available
No
9.2.19, 10.2.10 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 23 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801
CWE-1321 Medium
No
No
9.2.17, 10.2.7 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU85342 - Improper input validation
CVE-2023-48631
CWE-20 Low
No
No
9.2.19, 10.2.10 12.01.2024 SB2024011226
SB2024011227
SB2024030510
and 4 more


Showing elements 41 - 60 out of 180