Confluence Server and Data Center vulnerabilities
3 known CVE vulnerabilities in Confluence Server and Data Center, translated and rated.
- CVE-2022-26134CriticalActively exploited
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that allows an unauthenticated attacker to execute arbitrary code on the instance. Affected versions range from 1.3.0 before 7.4.17, 7.13.0 before 7.13.7, 7.14.0 before 7.14.3, 7.15.0 before 7.15.2, 7.16.0 before 7.16.4, 7.17.0 before 7.17.4, and 7.18.0 before 7.18.1.
- CVE-2021-26084CriticalActively exploited
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance.
- CVE-2019-3398HighActively exploited
A path traversal vulnerability in the downloadallattachments resource in Confluence Server and Data Center. It allows writing files to arbitrary locations, potentially leading to remote code execution.