Atlassian Confluence SSTI RCE (CVE-2023-22527)

Exploits CVE-2023-22527 OGNL injection on /template/aui/text-inline.vm to run arbitrary OS commands via freemarker Execute.exec. Confluence 8.0.0–8.5.3 are affected. !/usr/bin/env python3 -- coding: utf-8 -- """Atlassian Confluence SSTI / OGNL RCE CVE-2023-22527 — reverse CMD session.""" from...

@atlassian/aui (>=9.3.22, <=10.0.0-M02), @charcoal-ui/icons (>=3.16.0, <=3.21.0) +118 more potentially affected by CVE-2025-15599 via dompurify (>=2.5.4, <=2.5.8)

dompurify NPM version =2.5.4, =9.3.22, =3.16.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240719153432, =0.0.0-fec-156-react19-20250116105607,...

@atlassian/aui (>=9.3.22, <=10.0.0-M02), @charcoal-ui/icons (>=3.16.0, <=3.21.0) +118 more potentially affected by CVE-2026-0540 via dompurify (>=2.5.4, <=2.5.8)

dompurify NPM version =2.5.4, =9.3.22, =3.16.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240719153432, =0.0.0-fec-156-react19-20250116105607,...

@atlassian/aui (>=9.3.22, <=10.0.0-M02), @charcoal-ui/icons (>=3.16.0, <=3.21.0) +118 more potentially affected by CVE-2026-0540 via dompurify (>=2.5.4, <=2.5.8)

dompurify NPM version =2.5.4, =9.3.22, =3.16.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240719153432, =0.0.0-fec-156-react19-20250116105607,...

@atlassian/aui (>=9.3.22, <=10.0.0-M02), @charcoal-ui/icons (>=3.16.0, <=3.21.0) +118 more potentially affected by CVE-2026-0540 via dompurify (>=2.5.4, <=2.5.8)

dompurify NPM version =2.5.4, =9.3.22, =3.16.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240719153432, =0.0.0-fec-156-react19-20250116105607,...

EUVD-2021-22936

Malware in sbrugna...

MAL-2025-15041 Malicious code in aui-js (npm)

The package aui-js was found to contain malicious code...

Malicious code in aui-js (npm)

The package aui-js was found to contain malicious code...

CVE-2025-21117

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user...

PT-2025-5697

Name of the Vulnerable Software and Affected Versions: Dell Avamar versions 19.4 or later Description: The issue is related to an access token reuse vulnerability in the AUI, which could be exploited by a low-privileged local attacker to fully impersonate a user. Recommendations: For versions 19....

CVE-2025-21117: Operation on a Resource after Expiration or Release

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local attacker could potentially exploit this vulnerability, leading to fully impersonating the user...

@atlassian/aui (>=8.2.4, <=9.5.1), @chinchilla-software/ng-date-time-picker (>=1.0.0, <=1.0.1) +137 more potentially affected by CVE-2022-31160 via jquery-ui (>=1.10.4, <=1.13.1)

jquery-ui NPM version =1.10.4, =8.2.4, =1.0.0, =1.0.0, =0.1.0, =2.3.2, =6.4.0, =1.1.42, =5.0.0-110, =0.0.0, =2.1.1, =4.0.0, =1.0.0-alpha.0, =1.0.0-alpha.10 and more Source cves: CVE-2022-31160 Source advisory: GHSA-H6GJ-6JJQ-H8G9...

Privilege escalation

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation ...

CVE-2021-36316

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 are affected by an improper privilege management vulnerability in AUI. A malicious user with high privileges could disclose AUI information and perform unauthorized operations on AUI. The provided documents do not include deeper roo...

PT-2021-21218

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 18.2 through 19.4 Description The issue is related to improper privilege management in AUI, which could be exploited by a malicious user with high privileges. This could lead to the disclosure of AUI information...

CVE-2021-36316: Improper Privilege Management

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation ...

@atlassian/aui (>=8.2.4, <=9.4.1), @chinchilla-software/ng-date-time-picker (>=1.0.0, <=1.0.1) +131 more potentially affected by CVE-2021-41184 via jquery-ui (>=1.10.4, <=1.12.1)

jquery-ui NPM version =1.10.4, =8.2.4, =1.0.0, =1.0.0, =0.1.0, =2.3.2, =6.4.0, =1.1.42, =5.0.0-110, =0.0.0, =2.1.1, =4.0.0, =1.0.0-alpha.0, =1.0.0-alpha.10 and more Source cves: CVE-2021-41184 Source advisory: GHSA-GPQQ-952Q-5327...