주요 제품 취약점 (10건)
"Atlassian Confluence" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Atlassian Confluence
Atlassian Confluence Data Center and Server
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an aff…
|
CVE-2023-22527 | 9.8 | CWE-74 | KEV | 2024-01-24 |
|
Atlassian Confluence
Atlassian Confluence Data Center and Server
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an…
|
CVE-2023-22518 | 9.8 | CWE-863 | KEV | 2023-11-07 |
|
Atlassian Confluence
Atlassian Confluence Data Center and Server
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnera…
|
CVE-2023-22515 | 9.8 | CWE-20 | KEV | 2023-10-05 |
|
Atlassian Confluence
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with…
|
CVE-2022-26138 | 9.8 | CWE-798 | KEV | 2022-07-29 |
|
Atlassian Confluence
Atlassian Confluence Server/Data Center
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to exe…
|
CVE-2022-26134 | 9.8 | CWE-917 | KEV | 2022-06-02 |
|
Atlassian Confluence
Atlassian Confluence Server and Data Center
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to exe…
|
CVE-2021-26084 | 9.8 | CWE-917 | KEV | 2021-11-03 |
|
Atlassian Confluence
Atlassian Confluence Server and Data Server
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the …
|
CVE-2019-3396 | 9.8 | CWE-22 | KEV | 2021-11-03 |
|
Atlassian Confluence
Atlassian Confluence Server and Data Center
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to …
|
CVE-2019-3398 | 8.8 | CWE-22 | KEV | 2021-11-03 |
|
Atlassian Confluence
Atlassian Confluence Server
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vuln…
|
CVE-2021-26085 | 5.3 | CWE-425 | KEV | 2022-03-28 |
|
Atlassian Confluence
Atlassian Multiple Products
h3. Summary
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center…
|
CVE-2026-21589 | — | — | KEV | 2026-10-15 |