Known vulnerabilities in Confluence Data Center - page 7
Vendor:
Atlassian
Software:
Confluence Data Center
Software CPE:
cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
225
Public exploits:
28
Known exploited (KEV):
5
Breakdown by Severity Chart
10.2.18
9.2.25
10.2.19
9.2.26
10.2.17
9.2.24
10.2.8
9.2.18
10.2.15
9.2.23
9.2.22
10.2.14
10.2.13
9.2.21
1.0.0
3.0
9.2.20
10.2.11
10.2.10
9.2.19
9.2.17
10.1.2
10.2.7
10.2.6
9.2.15
10.2.3
9.2.14
8.5.31
10.2.2
9.2.13
10.2.1
9.2.12
8.5.30
10.2.0
9.2.11
8.5.29
9.2.10
8.5.28
10.1.1
10.1.0
9.2.9
8.5.27
9.2.8
10.0.3
9.0.3
10.0.2
9.5.4
9.5.3
9.2.7
8.5.26
8.5.25
10.0.1
8.5.24
9.5.2
9.2.6
9.2.5
8.5.23
9.5.1
9.5.0
8.5.22
9.2.4
9.4.1
9.3.2
8.5.21
9.2.3
9.4.0
9.2.2
8.5.20
9.3.1
8.5.19
9.2.1
7.19.30
8.5.18
9.2.0
8.9.8
7.19.29
8.5.17
9.1.1
9.1.0
8.9.7
8.5.16
7.19.28
8.9.6
8.5.15
7.19.27
9.0.2
9.0.0
8.5.14
7.19.26
9.0.1
8.9.5
7.19.25
8.5.12
8.9.4
7.19.24
8.9.3
8.5.11
8.9.2
8.5.10
7.19.23
7.19.22
8.5.9
8.9.1
8.5.8
8.9.0
7.19.21
8.8.1
7.19.20
8.5.7
8.8.0
8.5.6
7.19.19
7.19.18
8.5.5
8.7.2
8.5.4
7.19.17
8.7.1
8.7.0
8.6.2
8.4.5
8.1.4
8.6.1
8.5.3
7.19.16
8.6.0
8.4.4
8.3.4
7.19.15
8.5.2
8.4.3
8.3.3
8.5.1
7.19.14
7.19.12
8.5.0
8.4.2
7.13.20
8.4.1
7.19.11
7.13.19
8.4.0
8.3.2
8.3.1
8.3.0
8.2.3
8.2.2
8.2.1
8.2.0
8.1.3
8.1.1
8.1.0
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.20.3
7.20.2
7.20.1
7.20.0
7.19.10
7.19.9
7.19.8
7.19.7
7.19.6
7.19.5
7.19.4
7.19.3
7.19.2
7.19.1
7.19.0
7.18.3
7.18.2
7.17.5
7.16.5
7.15.3
7.14.4
7.13.18
7.13.17
7.13.16
7.13.15
7.13.14
7.13.13
7.13.12
7.13.11
7.13.9
7.13.8
7.12.5
7.12.4
7.12.3
7.12.2
7.12.1
7.12.0
7.11.6
7.11.3
7.11.2
7.11.1
7.11.0
7.10.2
7.10.1
7.10.0
7.9.3
7.9.1
7.9.0
7.8.3
7.8.1
7.8.0
7.7.4
7.7.3
7.7.2
7.6.3
7.6.2
7.6.1
7.6.0
7.5.2
7.5.1
7.5.0
7.4.18
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.2.2
7.2.1
7.2.0
7.1.2
7.1.1
7.1.0
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
6.15.10
6.15.9
6.15.8
6.15.7
6.15.6
6.15.4
6.15.2
6.15.1
6.14.3
6.14.2
6.14.1
6.14.0
6.13.23
6.13.21
6.13.20
6.13.19
6.13.18
6.13.17
6.13.15
6.13.13
6.13.12
6.13.11
6.13.10
6.13.9
6.13.8
6.13.7
6.13.6
6.13.5
6.13.4
6.13.3
6.13.2
6.13.1
6.13.0
6.12.4
6.12.3
6.12.2
6.12.1
6.12.0
6.11.2
6.11.1
6.11.0
6.10.3
6.10.2
6.10.1
6.10.0
6.9.3
6.9.1
6.9.0
6.8.5
6.8.3
6.8.2
6.8.1
6.8.0
6.7.3
6.7.2
6.7.1
6.7.0
6.6.17
6.6.16
6.6.15
6.6.14
6.6.13
6.6.12
6.6.11
6.6.10
6.6.9
6.6.8
6.6.7
6.6.6
6.6.5
6.6.4
6.6.3
6.6.2
6.6.1
6.6.0
6.5.3
6.5.2
6.5.1
6.5.0
6.4.3
6.4.2
6.4.1
6.4.0
6.3.4
6.3.3
6.3.2
6.3.1
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.10.9
5.10.8
5.10.7
5.10.6
5.10.4
5.10.3
5.10.2
5.10.1
5.10.0
5.9.14
5.9.12
5.9.11
5.9.10
5.9.9
5.9.8
5.9.7
5.9.6
5.9.5
5.9.4
5.9.3
5.9.2
5.9.1
5.8.18
5.8.17
5.8.16
5.8.15
5.8.14
5.8.13
5.8.10
5.8.9
5.8.8
5.8.6
5.8.5
5.8.4
5.8.2
5.7.6
5.7.5
5.7.4
5.7.3
5.7.1
5.7
5.6.6
5.6.5
5.6.4
5.6.3
5.6.1
5.5.7
5.5.6
5.5.3
5.5.2
5.5.1
5.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4
5.3.4
5.3.1
5.3
5.2.5
5.2.3
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1
5.0.3
5.0.2
5.0.1
5.0
4.3.7
4.3.6
4.3.5
4.3.3
4.3.2
4.3.1
4.3
4.2.13
4.2.12
4.2.11
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2
4.1.10
4.1.9
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1
4.0.7
4.0.5
4.0.4
4.0.3
4.0
3.5.17
3.5.16
3.5.13
3.5.11
3.5.9
3.5.7
3.5.6
3.5.5
3.5.4
3.5.3
3.5.2
3.5.1
3.5
3.4.9
3.4.8
3.4.7
3.4.6
3.4.5
3.4.3
3.4.2
3.4.1
3.4
3.3.3
3.3.1
3.3
3.2
3.1.2
3.1.1
3.1
3.0.2
3.0.1
2.10.4
2.9.3
2.8.3
2.7.4
2.6.3
2.2.10
2.2.9
2.2.8
2.2.7
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1
2.0.3
2.0.2
2.0.1
2.0
1.4.4
1.4.3
1.4.2
1.4.1
1.4
1.3.6
1.3.5
1.2.3
1.1.2
7.18.1
7.18.0
7.17.4
7.17.3
7.17.2
7.17.1
7.17.0
7.16.4
7.16.3
7.16.2
7.16.1
7.16.0
7.15.2
7.15.1
7.15.0
7.14.3
7.14.2
7.14.1
7.14.0
7.13.7
7.13.6
7.13.5
7.13.4
7.13.3
7.13.2
7.13.1
7.13.0
7.4.17
7.4.16
7.4.15
7.4.14
7.4.13
7.4.12
7.4.11
7.4.10
7.4.9
7.4.8
7.4.7
7.4.6
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
Vulnerabilities (225)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117773 - Resource exhaustion CVE-2025-22166 |
CWE-400 | Medium | 8.5.25, 9.2.7, 9.5.2, 10.0.2 | 29.10.2025 |
SB2025102912 |
||
| #VU115570 - Protection Mechanism Failure CVE-2025-41248 |
CWE-693 | Medium | 10.1.1 | 16.09.2025 |
SB20250916313 SB2025100741 SB20251008143 and 33 more |
||
| #VU114385 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-54988 |
CWE-611 | Medium | 8.5.31, 9.2.13, 10.2.2 | 22.08.2025 |
SB2025082219 SB2025083007 SB2025083008 and 33 more |
||
| #VU112157 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-48387 |
CWE-22 | High | 8.5.10, 9.2.5, 9.3.1, 9.5.1, 10.0.2, 10.1.0 | 03.07.2025 |
SB2025070352 SB2025070353 SB2025070354 and 13 more |
||
| #VU111165 - Improper Access Control CVE-2025-48734 |
CWE-284 | Medium | 8.5.24, 9.2.6, 9.5.2, 10.0.3 | 16.06.2025 |
SB2025061643 SB2025061644 SB2025061645 and 141 more |
||
| #VU109240 - Configuration CVE-2025-27820 |
CWE-16 | Medium | 9.2.6, 9.5.2 | 16.05.2025 |
SB2025051604 SB2025060628 SB2025063009 and 10 more |
||
| #VU107996 - Error Handling CVE-2025-31650 |
CWE-388 | Medium | 8.5.22, 9.2.4, 9.4.1 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 38 more |
||
| #VU106926 - Resource Management Errors CVE-2024-57699 |
CWE-399 | Medium | 8.5.22, 9.2.4, 9.4.1 | 03.04.2025 |
SB2025040317 SB2025040325 SB2025040326 and 64 more |
||
| #VU106282 - Improper Link Resolution Before File Access ('Link Following') CVE-2024-12905 |
CWE-59 | High | 8.5.10, 9.2.5, 9.3.1, 9.5.1, 10.0.2 | 31.03.2025 |
SB2025033140 SB2025033150 SB2025033151 and 15 more |
||
| #VU105881 - Security Features CVE-2025-22228 |
CWE-254 | Low | 8.5.23, 9.2.5, 9.5.1 | 19.03.2025 |
SB2025031966 SB2025040327 SB2025061733 and 24 more |
||
| #VU103770 - Improper input validation CVE-2025-24970 |
CWE-20 | Medium | 8.5.20, 9.2.2, 9.3.2 | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 88 more |
||
| #VU100095 - Memory corruption CVE-2024-47072 |
CWE-119 | Medium | 8.5.21, 9.2.2, 9.3.2 | 07.11.2024 |
SB20241107102 SB20241115126 SB2024112531 and 37 more |
||
| #VU98132 - Inefficient Regular Expression Complexity CVE-2024-45296 |
CWE-1333 | Low | 8.5.17, 9.2.6, 9.4.0, 9.5.1, 10.0.2, 10.1.0 | 08.10.2024 |
SB2024100822 SB2024100823 SB2024100826 and 87 more |
||
| #VU95816 - Server-Side Request Forgery (SSRF) CVE-2024-29415 |
CWE-918 | Medium | 8.5.20, 9.2.6, 9.3.1, 9.4.0, 9.5.2, 10.0.2 | 13.08.2024 |
SB2024081345 SB2024082612 SB2024082760 and 14 more |
||
| #VU94329 - NULL Pointer Dereference CVE-2024-37890 |
CWE-476 | Medium | 8.5.10, 9.2.5, 9.3.1, 9.5.1, 10.0.2, 10.1.0 | 15.07.2024 |
SB2024071508 SB2024071933 SB2024081608 and 32 more |
||
| #VU86944 - Server-Side Request Forgery (SSRF) CVE-2023-42282 |
CWE-918 | Medium | 8.5.18, 9.2.1, 9.3.1, 9.5.4, 10.0.2, 10.1.0 | 01.03.2024 |
SB2024030127 SB2024030148 SB2024030415 and 29 more |
||
| #VU70123 - Improper Control of Generation of Code ('Code Injection') CVE-2022-37601 |
CWE-94 | High | 9.2.1, 9.4.0, 9.5.1, 10.0.2 | 12.12.2022 |
SB2022121220 SB2023010419 SB2023011403 and 20 more |
||
| #VU70122 - Incorrect Regular Expression CVE-2022-37599 |
CWE-185 | Medium | 9.2.1, 9.4.0, 9.5.1, 10.0.2 | 12.12.2022 |
SB2022121221 SB2023010424 SB2023020920 and 19 more |
||
| #VU70121 - Incorrect Regular Expression CVE-2022-37603 |
CWE-185 | Medium | 9.2.1, 9.4.0, 9.5.1, 10.0.2 | 12.12.2022 |
SB2022121221 SB2022121222 SB2023010418 and 29 more |
||
| #VU65655 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-10172 |
CWE-611 | Medium | 8.5.21, 9.2.3, 9.4.0 | 21.07.2022 |
SB2022072128 SB2021021828 SB2023042803 and 19 more |
Showing elements 121 - 140 out of 225