Known vulnerabilities in Confluence Data Center - page 5

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 225
Public exploits: 28
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Confluence Data Center Confluence Data Center is affected by 225 known vulnerabilities: 2 critical, 26 high, 170 medium, 27 low Critical High Medium Low

Vulnerabilities (225)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131179 - Improper Handling of Case Sensitivity
CVE-2026-43513
CWE-178 Medium
No
No
9.2.21, 10.2.13 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 28 more
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498
CWE-200 Low
No
No
9.2.21, 10.2.13 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 26 more
#VU131183 - Resource exhaustion
CVE-2026-41284
CWE-400 Medium
No
No
9.2.21, 10.2.13 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 23 more
#VU131107 - Resource exhaustion
CVE-2026-45149
CWE-400 Medium
No
No
10.2.10 12.05.2026 SB2026051222
SB2026061993
SB2026061994
and 3 more
#VU130215 - Resource exhaustion
CVE-2026-42587
CWE-400 Medium
No
No
9.2.21, 10.2.13 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585
CWE-444 Medium
No
No
9.2.21, 10.2.13 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 17 more
#VU130208 - Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42579
CWE-626 Medium
No
No
9.2.21, 10.2.13 05.05.2026 SB20260505124
SB2026060936
SB2026060963
and 10 more
#VU128397 - Improper input validation
CVE-2026-33750
CWE-20 Medium
No
No
9.2.20, 10.2.10 28.04.2026 SB20260428215
SB20260428223
SB2026042934
and 9 more
#VU126873 - Inefficient Regular Expression Complexity
CVE-2026-27904
CWE-1333 Low
No
No
9.2.21, 10.2.10 22.04.2026 SB20260422244
SB20260423104
SB20260423105
and 16 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483
CWE-116 Medium
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 21 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487
CWE-532 Medium
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 21 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880
CWE-444 Medium
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 19 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145
CWE-295 Low
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 18 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146
CWE-327 Medium
No
No
9.2.20, 10.2.11 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 29 more
#VU123491 - Memory corruption
CVE-2026-29062
CWE-119 Medium
No
No
10.2.11 04.03.2026 SB2026030413
SB2026060232
SB2026060234
and 3 more
#VU123172 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-26960
CWE-22 Medium
No
No
9.2.19, 10.2.10 24.02.2026 SB2026022432
SB20260428166
SB2026042935
and 2 more
#VU122999 - Improper Authorization
CVE-2026-24734
CWE-285 Medium
No
No
9.2.20, 10.2.11 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 27 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639
CWE-754 Medium
Available
No
9.2.19, 10.2.10 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 25 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801
CWE-1321 Medium
No
No
9.2.17, 10.2.7 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU85342 - Improper input validation
CVE-2023-48631
CWE-20 Low
No
No
9.2.19, 10.2.10 12.01.2024 SB2024011226
SB2024011227
SB2024030510
and 4 more


Showing elements 81 - 100 out of 225