Atlassian Confluence Server

8 known vulnerabilities in Atlassian Confluence Server, 7 critical, 7 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2023-22527 CVSS 9.8 critical · actively exploited Atlassian Confluence Data Center and Server Template Injection Vulnerability
  • CVE-2023-22518 CVSS 9.8 critical · actively exploited Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
  • CVE-2023-22515 CVSS 9.8 critical · actively exploited Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
  • CVE-2022-26134 CVSS 9.8 critical · actively exploited Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
  • CVE-2021-26084 CVSS 9.8 critical · actively exploited Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
  • CVE-2021-26085 CVSS 5.3 medium · actively exploited Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
  • CVE-2019-3396 CVSS 9.8 critical · actively exploited Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

Latest vulnerabilities

  • CVE-2026-21589 CVSS 9.3 critical h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software…
  • CVE-2023-22527 CVSS 9.8 critical · actively exploited Atlassian Confluence Data Center and Server Template Injection Vulnerability
  • CVE-2023-22518 CVSS 9.8 critical · actively exploited Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
  • CVE-2023-22515 CVSS 9.8 critical · actively exploited Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
  • CVE-2022-26134 CVSS 9.8 critical · actively exploited Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
  • CVE-2021-26084 CVSS 9.8 critical · actively exploited Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
  • CVE-2021-26085 CVSS 5.3 medium · actively exploited Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
  • CVE-2019-3396 CVSS 9.8 critical · actively exploited Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability