Lucene search
Assaf Vilmovsky , Abdeslam Bella & Maxim ZavodchikAKAMAIBLOG:70514CEAD92A7A0C6AEE397520B2E557HistorySep 15, 2021 - 7:00 a.m.
Confluence Server Webwork OGNL Injection (CVE-2021-26084): How Akamai Helps You Protect Against Zero-Day Attacks
2021-09-1507:00:00
Assaf Vilmovsky , Abdeslam Bella & Maxim Zavodchik
www.akamai.com
86
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.974
Percentile
99.9%
Recently Atlassian has disclosed a critical RCE (Remote Code Execution) vulnerability in its Confluence server and Data Center products (CVE-2021-26084), which might allow unauthenticated users to execute arbitrary code on vulnerable servers.
Related
cvelist
cvelist
CVE-2021-26084
2021-08-10 00:00:00
githubexploit
githubexploit
Exploit for Injection in Atlassian Confluence
2021-09-07 01:15:16
Exploit for Injection in Atlassian Confluence Server
2021-09-01 12:36:52
thn
thn
Atlassian Confluence RCE Flaw Abused in Multiple Cyberattack Campaigns
2021-09-28 15:31:00
Latest Atlassian Confluence Flaw Exploited to Breach Jenkins Project Server
2021-09-07 10:05:00
prion
prion
Code injection
2021-08-30 07:15:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-10-22 14:25:55
Active Exploitation of Confluence Server & Confluence Data Center: CVE-2021-26084
2021-09-02 15:44:36
Metasploit Wrap-Up
2021-09-10 18:32:40
checkpoint_advisories
checkpoint_advisories
Atlassian Confluence Remote Code Execution (CVE-2021-26084)
2021-09-05 00:00:00
cisa
cisa
Atlassian Releases Security Updates for Confluence Server and Data Center
2021-09-03 00:00:00
nessus
nessus
nuclei
nuclei
Confluence Server - Remote Code Execution
2021-08-31 20:40:27
attackerkb
attackerkb
CVE-2021-26084 Confluence Server OGNL injection
2021-08-10 00:00:00
atlassian
atlassian
Confluence Server Webwork OGNL injection - CVE-2021-26084
2021-07-27 05:13:48
Confluence Server Webwork OGNL injection - CVE-2021-26084
2021-07-27 05:13:48
RCE on Confluence Data Center via OGNL Injection - CVE-2021-39114
2021-08-27 03:55:57
threatpost
threatpost
Log4JShell Used to Swarm VMware Servers with Miners, Backdoors
2022-03-29 20:33:08
Jenkins Hit as Atlassian Confluence Cyberattacks Widen
2021-09-07 16:07:58
Zoho ManageEngine Password Manager Zero-Day Gets Fix
2021-09-09 12:58:48
nvd
nvd
CVE-2021-26084
2021-08-30 07:15:06
zdt
zdt
Atlassian Confluence WebWork OGNL Injection Exploit
2021-09-10 00:00:00
Confluence Server 7.12.4 - (OGNL injection) Remote Code Execution Exploit
2021-09-01 00:00:00
Atlassian Confluence Namespace OGNL Injection Exploit
2022-06-09 00:00:00
trendmicroblog
trendmicroblog
cve
cve
CVE-2021-26084
2021-08-30 07:15:06
hackerone
hackerone
U.S. Dept Of Defense: RCE on ███████ [CVE-2021-26084]
2021-09-02 02:58:10
U.S. Dept Of Defense: RCE in ███ [CVE-2021-26084]
2021-09-02 05:49:27
metasploit
metasploit
Atlassian Confluence WebWork OGNL Injection
2021-10-14 21:58:04
packetstorm
packetstorm
Atlassian Confluence WebWork OGNL Injection
2021-09-10 00:00:00
Confluence Server 7.12.4 OGNL Injection Remote Code Execution
2021-09-01 00:00:00
Atlassian Confluence Namespace OGNL Injection
2022-06-08 00:00:00
cisa_kev
cisa_kev
akamaiblog
akamaiblog
exploitdb
exploitdb
impervablog
impervablog
2021 in Review, Part 2: 5 Top Cybersecurity Stories
2021-12-29 12:03:19
New Sysrv Botnet Variant Makes Use of Google Subdomain to Spread XMRig Miner
2024-03-20 16:56:29
Attackers Quick to Weaponize CVE-2023-22527 for Malware Delivery
2024-02-21 09:28:01
malwarebytes
malwarebytes
Update now! Atlassian Confluence vulnerability is being actively exploited
2023-10-12 04:00:00
The top 5 most routinely exploited vulnerabilities of 2021
2022-04-29 16:28:20
2022's most routinely exploited vulnerabilities—history repeats
2023-08-07 18:30:00
hivepro
hivepro
Cerber targeting organizations with publicly available exploits
2021-12-14 13:50:15
mssecure
mssecure
mmpc
mmpc
ics
ics
People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action
2024-07-08 12:00:00
Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors
2022-10-06 12:00:00
2021 Top Routinely Exploited Vulnerabilities
2022-04-28 12:00:00
avleonov
avleonov
github
github
Bypassing OGNL sandboxes for fun and charities
2023-01-27 16:00:49
qualysblog
qualysblog
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
CISA Alert: Top 15 Routinely Exploited Vulnerabilities
2022-05-06 12:19:24
googleprojectzero
googleprojectzero
2022 0-day In-the-Wild Exploitation…so far
2022-06-30 00:00:00
securelist
securelist
IT threat evolution in Q3 2021. PC statistics
2021-11-26 12:00:36
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.974
Percentile
99.9%
Related for AKAMAIBLOG:70514CEAD92A7A0C6AEE397520B2E557