Lucene search
+L

3610 matches found

CVE
CVE
•added 2022/06/03 9:51 p.m.•1817 views

CVE-2022-26134

CVE-2022-26134 is an unauthenticated OGNL injection in Atlassian Confluence Server and Data Center that enables remote code execution. Affected: Confluence Server/Data Center versions from 1.3.0 up to 7.4.16, 7.13.x up to 7.13.6, 7.14.x up to 7.14.2, 7.15.x up to 7.15.1, 7.16.x up to 7.16.3, 7.17...

9.8CVSS8.6AI score0.99999EPSS
SaveIn wildExploits78References7Affected Software2
Cvelist
Cvelist
•added 2022/06/03 9:51 p.m.•51 views

CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

9.9AI score0.99999EPSS
SaveExploits78References6
Vulnrichment
Vulnrichment
•added 2022/06/03 9:51 p.m.•11 views

CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

8.6AI score0.99999EPSS
SaveExploits78References6
Wallarm Lab
Wallarm Lab
•added 2022/06/03 8:50 p.m.•188 views

Update on the Confluence 0-day vulnerability (CVE-2022-26134)

We want to share this update regarding the critical Confluence 0-day vulnerability CVE-2022-26134. On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severity unauthenticated remote code execution RCE...

7.5CVSS8.4AI score0.99999EPSS
SaveExploits78
Atlassian
Atlassian
•added 2022/06/03 8:08 p.m.•94 views

Remote code execution via OGNL injection in Confluence Server & Data Center - CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits78
GithubExploit
GithubExploit
•added 2022/06/03 7:24 p.m.•379 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits78
Malwarebytes
Malwarebytes
•added 2022/06/03 2:41 p.m.•87 views

[updated]Unpatched Atlassian Confluence vulnerability is actively exploited

Researchers found a vulnerability in Atlassian Confluence by conducting an incident response investigation. Atlassian rates the severity level of this vulnerability as critical. Atlassian has issued a security advisory and is working on a fix for the affected products. This qualifies the...

8.6AI score0.99999EPSS
SaveExploits78
GithubExploit
GithubExploit
•added 2022/06/03 1:59 p.m.•453 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Through the Wire Through the Wire is a proof of concept explo...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits78
GithubExploit
GithubExploit
•added 2022/06/03 1:52 p.m.•308 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requ...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits78
GithubExploit
GithubExploit
•added 2022/06/03 1:52 p.m.•307 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requ...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits78
Akamai Blog
Akamai Blog
•added 2022/06/03 9:00 a.m.•279 views

Akamai Protects Against the Atlassian Confluence 0-Day (CVE-2022-26134)

Atlassian has released a security advisory to address a remote code execution vulnerability CVE-2022-26134 that’s affecting Confluence Server and Data Center products...

9.8CVSS8.5AI score0.99999EPSS
SaveExploits78
The Hacker News
The Hacker News
•added 2022/06/03 3:43 a.m.•4649 views

Hackers Exploiting Unpatched Critical Atlassian Confluence Zero-Day Vulnerability

Atlassian has warned of a critical unpatched remote code execution vulnerability impacting Confluence Server and Data Center products that it said is being actively exploited in the wild. The Australian software company credited cybersecurity firm Volexity for identifying the flaw, which is being...

9.8CVSS8AI score0.99999EPSS
SaveExploits118
CNNVD
CNNVD
•added 2022/06/03 12:00 a.m.•10 views

Atlassian Confluence Server 注入漏洞

Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. A command execution vulnerability exists in Atlassian Confluence Server and Data Center that could...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits78References11
Tenable Nessus
Tenable Nessus
•added 2022/06/03 12:00 a.m.•115 views

Atlassian Confluence Command Injection (CVE-2022-26134)

According to its self-reported version number, the Atlassian Confluence running on the remote host is affected by a command injection vulnerability. A remote, unauthenticated attacker can use this to execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied onl...

9.8CVSS8.5AI score0.99999EPSS
SaveExploits78References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/03 12:00 a.m.•6 views

CVE-2022-26134: Improper Neutralization of Special Elements used in an Expression Language Statement

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits78References3
BDU FSTEC
BDU FSTEC
•added 2022/06/03 12:00 a.m.•13 views

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date processing system, related to errors in handling input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.9AI score0.99999EPSS
SaveExploits78References9Affected Software2
CISA
CISA
•added 2022/06/03 12:00 a.m.•81 views

Atlassian Releases New Versions of Confluence Server and Data Center to Address CVE-2022-26134

Atlassian has released new Confluence Server and Data Center versions to address remote code execution vulnerability CVE-2022-26134 affecting these products. An unauthenticated remote attacker could exploit this vulnerability to execute code remotely. Atlassian reports that there is known...

7.5CVSS8.5AI score0.99999EPSS
SaveIn wildExploits78References3
attackerkb
attackerkb
•added 2022/06/03 12:00 a.m.•423 views

CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

9.8CVSS8.4AI score0.99999EPSS
SaveIn wildExploits155References8
NCSC
NCSC
•added 2022/06/03 12:00 a.m.•14 views

0Day vulnerability discovered in Atlassian Confluence

A 0Day vulnerability has been discovered in Atlassian Confluence Server and Confluence Datacenter. An unauthenticated malicious party can exploit the vulnerability to execute arbitrary code with application privileges and thus also gain access to sensitive data within the scope of the affected...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits78
CNVD
CNVD
•added 2022/06/03 12:00 a.m.•9 views

Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi.Atlassian Confluence Data Center is the data center version of Atlassian Confluence. Atlassian...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits78References1
Rows per page
Query Builder