Improper Encoding org.apache.tomcat:tomcat-catalina Dependency in Confluence Data Center

🗓️ 05 May 2026 10:29:18Reported by security-metrics-botType

atlassian

atlassian🔗 jira.atlassian.com👁 15 Views

High severity improper encoding vulnerability CVE-2026-34483 in Confluence Data Center; upgrade to fixed versions.

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat	14 May 202614:09	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 May 202616:03	–	ibm
ATTACKERKB	CVE-2026-34483	9 Apr 202619:30	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2026-1672)	20 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2026-1673)	20 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat, --advisory ALAS2TOMCAT9-2026-025 (ALASTOMCAT9-2026-025)	30 Apr 202600:00	–	nessus
Tenable Nessus	Atlassian Confluence 8.9.0 < 9.2.20 / 9.3.1 < 10.2.11 (CONFSERVER-103708)	26 May 202600:00	–	nessus
Tenable Nessus	Atlassian Jira Service Management Data Center and Server 10.0.1 < 10.3.20 / 10.4.0 < 11.3.5 (JSDSERVER-16587)	28 May 202600:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : tomcat11 (openSUSE-SU-2026:20595-1)	23 Apr 202600:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : tomcat (openSUSE-SU-2026:20611-1)	24 Apr 202600:00	–	nessus

Vulners

Node

atlassian confluence_data_centerMatch8.9.0

OR

atlassian confluence_data_centerMatch8.9.1

OR

atlassian confluence_data_centerMatch8.9.2

OR

atlassian confluence_data_centerMatch8.9.3

OR

atlassian confluence_data_centerMatch8.9.4

OR

atlassian confluence_data_centerMatch9.1.0

OR

atlassian confluence_data_centerMatch9.0.1

OR

atlassian confluence_data_centerMatch8.9.5

OR

atlassian confluence_data_centerMatch9.0.2

OR

atlassian confluence_data_centerMatch9.0.3

OR

atlassian confluence_data_centerMatch8.9.6

OR

atlassian confluence_data_centerMatch8.9.7

OR

atlassian confluence_data_centerMatch9.1.1

OR

atlassian confluence_data_centerMatch8.9.8

OR

atlassian confluence_data_centerMatch9.2.0

OR

atlassian confluence_data_centerMatch9.2.1

OR

atlassian confluence_data_centerMatch9.4.0

OR

atlassian confluence_data_centerMatch9.3.1

OR

atlassian confluence_data_centerMatch9.2.2

OR

atlassian confluence_data_centerMatch9.3.2

OR

atlassian confluence_data_centerMatch9.2.3

OR

atlassian confluence_data_centerMatch9.4.1

OR

atlassian confluence_data_centerMatch9.2.4

OR

atlassian confluence_data_centerMatch9.2.5

OR

atlassian confluence_data_centerMatch9.2.6

OR

atlassian confluence_data_centerMatch9.5.1

OR

atlassian confluence_data_centerMatch9.5.2

OR

atlassian confluence_data_centerMatch9.5.3

OR

atlassian confluence_data_centerMatch9.2.7

OR

atlassian confluence_data_centerMatch10.1.0

OR

atlassian confluence_data_centerMatch9.2.8

OR

atlassian confluence_data_centerMatch10.0.2

OR

atlassian confluence_data_centerMatch10.0.3

OR

atlassian confluence_data_centerMatch9.5.4

OR

atlassian confluence_data_centerMatch9.2.9

OR

atlassian confluence_data_centerMatch10.1.1

OR

atlassian confluence_data_centerMatch10.2.0

OR

atlassian confluence_data_centerMatch9.2.10

OR

atlassian confluence_data_centerMatch10.1.2

OR

atlassian confluence_data_centerMatch9.2.11

OR

atlassian confluence_data_centerMatch9.2.12

OR

atlassian confluence_data_centerMatch10.2.1

OR

atlassian confluence_data_centerMatch9.2.13

OR

atlassian confluence_data_centerMatch10.2.2

OR

atlassian confluence_data_centerMatch9.2.14

OR

atlassian confluence_data_centerMatch10.2.3

OR

atlassian confluence_data_centerMatch9.2.15

OR

atlassian confluence_data_centerMatch10.2.6

OR

atlassian confluence_data_centerMatch9.2.17

OR

atlassian confluence_data_centerMatch10.2.7

OR

atlassian confluence_data_centerMatch9.2.19

OR

atlassian confluence_data_centerMatch10.2.10

OR

atlassian confluence_data_centerMatch10.2.11

OR

atlassian confluence_data_centerMatch9.2.20

26 May 2026 20:31Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00067

SSVC

improper encoding confluence data center tomcat json access log valve upgrade versions unauthenticated disclosure cve 2026 34483