Companies/Confluence/CVEs

Confluence CVEs

11 matching vulnerabilities mapped to Confluence’s software or packages, 11 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.

CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.

• 2026-10-05

  CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

  CVSS 7.5 highKEV added 2026-10-15EPSS 99.5%

• 2024-01-16

  CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability

  CVSS 10.0 criticalKEV added 2024-01-24EPSS 100.0%

• 2023-10-31

  CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

  CVSS 10.0 criticalKEV added 2023-11-07EPSS 100.0%

• 2023-10-10

  CVE-2023-44487 HTTP/2 Rapid Reset Attack Vulnerability

  CVSS 7.5 highKEV added 2023-10-10EPSS 100.0%

• 2023-10-04

  CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

  CVSS 10.0 criticalKEV added 2023-10-05EPSS 99.2%

• 2022-07-20

  CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

  CVSS 9.8 criticalKEV added 2022-07-29EPSS 98.2%

• 2022-06-03

  CVE-2022-26134 Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

  CVSS 9.8 criticalKEV added 2022-06-02EPSS 100.0%

• 2021-08-03

  CVE-2021-26085 Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

  CVSS 5.3 mediumKEV added 2022-03-28EPSS 99.9%

• 2021-08-30

  CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

  CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%

• 2019-04-18

  CVE-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Vulnerability

  CVSS 8.8 highKEV added 2021-11-03EPSS 97.0%

• 2019-03-25

  CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

  CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.9%

All vendors’ CVEs · JSON · Markdown

• CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
• This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
• Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
• EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)