Known vulnerabilities in Confluence Data Center - page 5
Vendor:
Atlassian
Software:
Confluence Data Center
Software CPE:
cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
180
Public exploits:
26
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.2.8
9.2.18
10.2.15
9.2.23
9.2.22
10.2.14
10.2.13
9.2.21
1.0.0
3.0
9.2.20
10.2.11
10.2.10
9.2.19
9.2.17
10.1.2
10.2.7
10.2.6
9.2.15
10.2.3
9.2.14
8.5.31
10.2.2
9.2.13
10.2.1
9.2.12
8.5.30
10.2.0
9.2.11
8.5.29
9.2.10
8.5.28
10.1.1
10.1.0
9.2.9
8.5.27
9.2.8
10.0.3
9.0.3
10.0.2
9.5.4
9.5.3
9.2.7
8.5.26
8.5.25
10.0.1
8.5.24
9.5.2
9.2.6
9.2.5
8.5.23
9.5.1
9.5.0
8.5.22
9.2.4
9.4.1
9.3.2
8.5.21
9.2.3
9.4.0
9.2.2
8.5.20
9.3.1
8.5.19
9.2.1
7.19.30
8.5.18
9.2.0
8.9.8
7.19.29
8.5.17
9.1.1
9.1.0
8.9.7
8.5.16
7.19.28
8.9.6
8.5.15
7.19.27
9.0.2
9.0.0
8.5.14
7.19.26
9.0.1
8.9.5
7.19.25
8.5.12
8.9.4
7.19.24
8.9.3
8.5.11
8.9.2
8.5.10
7.19.23
7.19.22
8.5.9
8.9.1
8.5.8
8.9.0
7.19.21
8.8.1
7.19.20
8.5.7
8.8.0
8.5.6
7.19.19
7.19.18
8.5.5
8.7.2
8.5.4
7.19.17
8.7.1
8.7.0
8.6.2
8.4.5
8.1.4
8.6.1
8.5.3
7.19.16
8.6.0
8.4.4
8.3.4
7.19.15
8.5.2
8.4.3
8.3.3
8.5.1
7.19.14
7.19.12
8.5.0
8.4.2
7.13.20
8.4.1
7.19.11
7.13.19
8.4.0
8.3.2
8.3.1
8.3.0
8.2.3
8.2.2
8.2.1
8.2.0
8.1.3
8.1.1
8.1.0
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.20.3
7.20.2
7.20.1
7.20.0
7.19.10
7.19.9
7.19.8
7.19.7
7.19.6
7.19.5
7.19.4
7.19.3
7.19.2
7.19.1
7.19.0
7.18.3
7.18.2
7.17.5
7.16.5
7.15.3
7.14.4
7.13.18
7.13.17
7.13.16
7.13.15
7.13.14
7.13.13
7.13.12
7.13.11
7.13.9
7.13.8
7.12.5
7.12.4
7.12.3
7.12.2
7.12.1
7.12.0
7.11.6
7.11.3
7.11.2
7.11.1
7.11.0
7.10.2
7.10.1
7.10.0
7.9.3
7.9.1
7.9.0
7.8.3
7.8.1
7.8.0
7.7.4
7.7.3
7.7.2
7.6.3
7.6.2
7.6.1
7.6.0
7.5.2
7.5.1
7.5.0
7.4.18
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.2.2
7.2.1
7.2.0
7.1.2
7.1.1
7.1.0
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
6.15.10
6.15.9
6.15.8
6.15.7
6.15.6
6.15.4
6.15.2
6.15.1
6.14.3
6.14.2
6.14.1
6.14.0
6.13.23
6.13.21
6.13.20
6.13.19
6.13.18
6.13.17
6.13.15
6.13.13
6.13.12
6.13.11
6.13.10
6.13.9
6.13.8
6.13.7
6.13.6
6.13.5
6.13.4
6.13.3
6.13.2
6.13.1
6.13.0
6.12.4
6.12.3
6.12.2
6.12.1
6.12.0
6.11.2
6.11.1
6.11.0
6.10.3
6.10.2
6.10.1
6.10.0
6.9.3
6.9.1
6.9.0
6.8.5
6.8.3
6.8.2
6.8.1
6.8.0
6.7.3
6.7.2
6.7.1
6.7.0
6.6.17
6.6.16
6.6.15
6.6.14
6.6.13
6.6.12
6.6.11
6.6.10
6.6.9
6.6.8
6.6.7
6.6.6
6.6.5
6.6.4
6.6.3
6.6.2
6.6.1
6.6.0
6.5.3
6.5.2
6.5.1
6.5.0
6.4.3
6.4.2
6.4.1
6.4.0
6.3.4
6.3.3
6.3.2
6.3.1
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.10.9
5.10.8
5.10.7
5.10.6
5.10.4
5.10.3
5.10.2
5.10.1
5.10.0
5.9.14
5.9.12
5.9.11
5.9.10
5.9.9
5.9.8
5.9.7
5.9.6
5.9.5
5.9.4
5.9.3
5.9.2
5.9.1
5.8.18
5.8.17
5.8.16
5.8.15
5.8.14
5.8.13
5.8.10
5.8.9
5.8.8
5.8.6
5.8.5
5.8.4
5.8.2
5.7.6
5.7.5
5.7.4
5.7.3
5.7.1
5.7
5.6.6
5.6.5
5.6.4
5.6.3
5.6.1
5.5.7
5.5.6
5.5.3
5.5.2
5.5.1
5.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4
5.3.4
5.3.1
5.3
5.2.5
5.2.3
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1
5.0.3
5.0.2
5.0.1
5.0
4.3.7
4.3.6
4.3.5
4.3.3
4.3.2
4.3.1
4.3
4.2.13
4.2.12
4.2.11
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2
4.1.10
4.1.9
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1
4.0.7
4.0.5
4.0.4
4.0.3
4.0
3.5.17
3.5.16
3.5.13
3.5.11
3.5.9
3.5.7
3.5.6
3.5.5
3.5.4
3.5.3
3.5.2
3.5.1
3.5
3.4.9
3.4.8
3.4.7
3.4.6
3.4.5
3.4.3
3.4.2
3.4.1
3.4
3.3.3
3.3.1
3.3
3.2
3.1.2
3.1.1
3.1
3.0.2
3.0.1
2.10.4
2.9.3
2.8.3
2.7.4
2.6.3
2.2.10
2.2.9
2.2.8
2.2.7
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1
2.0.3
2.0.2
2.0.1
2.0
1.4.4
1.4.3
1.4.2
1.4.1
1.4
1.3.6
1.3.5
1.2.3
1.1.2
7.18.1
7.18.0
7.17.4
7.17.3
7.17.2
7.17.1
7.17.0
7.16.4
7.16.3
7.16.2
7.16.1
7.16.0
7.15.2
7.15.1
7.15.0
7.14.3
7.14.2
7.14.1
7.14.0
7.13.7
7.13.6
7.13.5
7.13.4
7.13.3
7.13.2
7.13.1
7.13.0
7.4.17
7.4.16
7.4.15
7.4.14
7.4.13
7.4.12
7.4.11
7.4.10
7.4.9
7.4.8
7.4.7
7.4.6
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
Vulnerabilities (180)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117773 - Resource exhaustion CVE-2025-22166 |
CWE-400 | Medium | 8.5.25, 9.2.7, 9.5.2, 10.0.2 | 29.10.2025 |
SB2025102912 |
||
| #VU115570 - Protection Mechanism Failure CVE-2025-41248 |
CWE-693 | Medium | 10.1.1 | 16.09.2025 |
SB20250916313 SB2025100741 SB20251008143 and 33 more |
||
| #VU112157 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-48387 |
CWE-22 | High | 8.5.10, 9.2.5, 9.3.1, 9.5.1, 10.0.2, 10.1.0 | 03.07.2025 |
SB2025070352 SB2025070353 SB2025070354 and 13 more |
||
| #VU111165 - Improper Access Control CVE-2025-48734 |
CWE-284 | Medium | 8.5.24, 9.2.6, 9.5.2, 10.0.3 | 16.06.2025 |
SB2025061643 SB2025061644 SB2025061645 and 141 more |
||
| #VU109240 - Configuration CVE-2025-27820 |
CWE-16 | Medium | 9.2.6, 9.5.2 | 16.05.2025 |
SB2025051604 SB2025060628 SB2025063009 and 10 more |
||
| #VU107996 - Error Handling CVE-2025-31650 |
CWE-388 | Medium | 8.5.22, 9.2.4, 9.4.1 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 38 more |
||
| #VU106926 - Resource Management Errors CVE-2024-57699 |
CWE-399 | Medium | 8.5.22, 9.2.4, 9.4.1 | 03.04.2025 |
SB2025040317 SB2025040325 SB2025040326 and 63 more |
||
| #VU105881 - Security Features CVE-2025-22228 |
CWE-254 | Low | 8.5.23, 9.2.5, 9.5.1 | 19.03.2025 |
SB2025031966 SB2025040327 SB2025061733 and 24 more |
||
| #VU103770 - Improper input validation CVE-2025-24970 |
CWE-20 | Medium | 8.5.20, 9.2.2, 9.3.2 | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 88 more |
||
| #VU101893 - Permissions, Privileges, and Access Controls CVE-2024-56337 |
CWE-264 | High | 8.5.19, 9.2.1 | 20.12.2024 |
SB2024122063 SB2025011311 SB2025011801 and 45 more |
||
| #VU101814 - Permissions, Privileges, and Access Controls CVE-2024-50379 |
CWE-264 | Medium | 8.5.19, 9.2.1 | 17.12.2024 |
SB2024121745 SB2024121905 SB2024122055 and 57 more |
||
| #VU100095 - Memory corruption CVE-2024-47072 |
CWE-119 | Medium | 8.5.21, 9.2.2, 9.3.2 | 07.11.2024 |
SB20241107102 SB20241115126 SB2024112531 and 36 more |
||
| #VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819 |
CWE-22 | Medium | 7.19.30, 8.5.18, 9.1.1 | 17.10.2024 |
SB2024101781 SB2024112849 SB2024120331 and 54 more |
||
| #VU98132 - Inefficient Regular Expression Complexity CVE-2024-45296 |
CWE-1333 | Low | 8.5.17, 9.2.6, 9.4.0, 9.5.1, 10.0.2, 10.1.0 | 08.10.2024 |
SB2024100822 SB2024100823 SB2024100826 and 87 more |
||
| #VU98024 - Improper input validation CVE-2024-47561 |
CWE-20 | High | 7.19.30, 8.5.18, 8.9.8, 9.1.1 | 03.10.2024 |
SB2024100351 SB2024100504 SB2024100984 and 36 more |
||
| #VU94329 - NULL Pointer Dereference CVE-2024-37890 |
CWE-476 | Medium | 8.5.10, 9.2.5, 9.3.1, 9.5.1, 10.0.2, 10.1.0 | 15.07.2024 |
SB2024071508 SB2024071933 SB2024081608 and 32 more |
||
| #VU86944 - Server-Side Request Forgery (SSRF) CVE-2023-42282 |
CWE-918 | Medium | 8.5.18, 9.2.1, 9.3.1, 9.5.4, 10.0.2, 10.1.0 | 01.03.2024 |
SB2024030127 SB2024030148 SB2024030415 and 29 more |
||
| #VU71577 - Improper Control of Generation of Code ('Code Injection') CVE-2022-46175 |
CWE-94 | Medium | 7.19.29, 8.5.17, 8.9.8, 9.1.0 | 26.01.2023 |
SB2023012644 SB2023012645 SB2023013117 and 44 more |
||
| #VU69942 - Incorrect Regular Expression CVE-2022-3517 |
CWE-185 | Medium | 7.19.29, 8.5.17, 8.9.8, 9.1.0 | 06.12.2022 |
SB2022120638 SB2022120639 SB2022120640 and 48 more |
||
| #VU65655 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-10172 |
CWE-611 | Medium | 8.5.21, 9.2.3, 9.4.0 | 21.07.2022 |
SB2022072128 SB2021021828 SB2023042803 and 18 more |
Showing elements 81 - 100 out of 180