Lucene search
+L

2957 matches found

Prion
Prion
added 2022/06/03 10:15 p.m.29 views

Code injection

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

7.5CVSS9.8AI score0.99999EPSS
SaveExploits77References6Affected Software2
Vulnrichment
Vulnrichment
added 2022/06/03 9:51 p.m.10 views

CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

8.4AI score0.99999EPSS
SaveExploits77References6
CVE
CVE
added 2022/06/03 9:51 p.m.1783 views

CVE-2022-26134

CVE-2022-26134 is an unauthenticated OGNL injection in Atlassian Confluence Server and Data Center that enables remote code execution. Affected: Confluence Server/Data Center versions from 1.3.0 up to 7.4.16, 7.13.x up to 7.13.6, 7.14.x up to 7.14.2, 7.15.x up to 7.15.1, 7.16.x up to 7.16.3, 7.17...

9.8CVSS9.9AI score0.99999EPSS
SaveIn wildExploits77References7Affected Software2
Cvelist
Cvelist
added 2022/06/03 9:51 p.m.44 views

CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

9.9AI score0.99999EPSS
SaveExploits77References6
Wallarm Lab
Wallarm Lab
added 2022/06/03 8:50 p.m.178 views

Update on the Confluence 0-day vulnerability (CVE-2022-26134)

We want to share this update regarding the critical Confluence 0-day vulnerability CVE-2022-26134. On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severity unauthenticated remote code execution RCE...

7.5CVSS0.6AI score0.99999EPSS
SaveExploits77
Atlassian
Atlassian
added 2022/06/03 8:08 p.m.87 views

Remote code execution via OGNL injection in Confluence Server & Data Center - CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

9.8CVSS5.8AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2022/06/03 7:24 p.m.366 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL...

9.8CVSS9.4AI score0.99999EPSS
SaveExploits77
Malwarebytes
Malwarebytes
added 2022/06/03 2:41 p.m.81 views

[updated]Unpatched Atlassian Confluence vulnerability is actively exploited

Researchers found a vulnerability in Atlassian Confluence by conducting an incident response investigation. Atlassian rates the severity level of this vulnerability as critical. Atlassian has issued a security advisory and is working on a fix for the affected products. This qualifies the...

10AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2022/06/03 1:59 p.m.440 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Through the Wire Through the Wire is a proof of concept explo...

9.8CVSS9.8AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2022/06/03 1:52 p.m.296 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requ...

9.8CVSS9.3AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2022/06/03 1:52 p.m.298 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requ...

9.8CVSS9.3AI score0.99999EPSS
SaveExploits77
Akamai Blog
Akamai Blog
added 2022/06/03 9:00 a.m.273 views

Akamai Protects Against the Atlassian Confluence 0-Day (CVE-2022-26134)

Atlassian has released a security advisory to address a remote code execution vulnerability CVE-2022-26134 that’s affecting Confluence Server and Data Center products...

9.8CVSS9.4AI score0.99999EPSS
SaveExploits77
The Hacker News
The Hacker News
added 2022/06/03 3:43 a.m.4627 views

Hackers Exploiting Unpatched Critical Atlassian Confluence Zero-Day Vulnerability

Atlassian has warned of a critical unpatched remote code execution vulnerability impacting Confluence Server and Data Center products that it said is being actively exploited in the wild. The Australian software company credited cybersecurity firm Volexity for identifying the flaw, which is being...

9.8CVSS2.4AI score0.99999EPSS
SaveExploits117
CNVD
CNVD
added 2022/06/03 12:00 a.m.7 views

Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi.Atlassian Confluence Data Center is the data center version of Atlassian Confluence. Atlassian...

9.8CVSS9AI score0.99999EPSS
SaveExploits77References1
NCSC
NCSC
added 2022/06/03 12:00 a.m.10 views

0Day vulnerability discovered in Atlassian Confluence

A 0Day vulnerability has been discovered in Atlassian Confluence Server and Confluence Datacenter. An unauthenticated malicious party can exploit the vulnerability to execute arbitrary code with application privileges and thus also gain access to sensitive data within the scope of the affected...

9.8CVSS7.7AI score0.99999EPSS
SaveExploits77
BDU FSTEC
BDU FSTEC
added 2022/06/03 12:00 a.m.10 views

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date processing system, related to errors in handling input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.99999EPSS
SaveExploits77References9Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/06/03 12:00 a.m.114 views

Atlassian Confluence Command Injection (CVE-2022-26134)

According to its self-reported version number, the Atlassian Confluence running on the remote host is affected by a command injection vulnerability. A remote, unauthenticated attacker can use this to execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied onl...

9.8CVSS9AI score0.99999EPSS
SaveExploits77References3
CNNVD
CNNVD
added 2022/06/03 12:00 a.m.7 views

Atlassian Confluence Server 注入漏洞

Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. A command execution vulnerability exists in Atlassian Confluence Server and Data Center that could...

9.8CVSS5.8AI score0.99999EPSS
SaveExploits77References11
CISA
CISA
added 2022/06/03 12:00 a.m.71 views

Atlassian Releases New Versions of Confluence Server and Data Center to Address CVE-2022-26134

Atlassian has released new Confluence Server and Data Center versions to address remote code execution vulnerability CVE-2022-26134 affecting these products. An unauthenticated remote attacker could exploit this vulnerability to execute code remotely. Atlassian reports that there is known...

7.5CVSS3.1AI score0.99999EPSS
SaveIn wildExploits77References3
ATTACKERKB
ATTACKERKB
added 2022/06/03 12:00 a.m.406 views

CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

9.8CVSS9.2AI score0.99999EPSS
SaveIn wildExploits152References8
Rows per page
Query Builder