-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability allows an unauthenticated attacker to remotely execute arbitrary code on a vulnerable Confluence server. The vulnerability exists due to an improper validation of user-supplied input in the Confluence REST API. This allow...

CVE-2022-36804

CVE-2022-36804 Atlassian Bitbucket Server et Data Center - Vulnérabilité d'injection de commande CVE-2022-36804 Dans les versions concernées d'Atlassian Bitbucket Server et Data Center, une vulnérabilité d'injection de commande existe dans plusieurs points de terminaison API où un attaquant ayant...

CVE-2023-22518

CVE-2023-22518 Vulnérabilité d'autorisation inappropriée dans Confluence Data Center et Server. Atlassian a alerté les administrateurs d'une vulnérabilité critique dans Confluence. L'exploitation de ce problème peut entraîner une perte de données, c'est pourquoi les développeurs vous exhortent à...

CVE-2022-26134

CVE-2022-26134 On May the 30th, 2022, an organisation named Volexity identified an un-authenticated RCE vulnerability scoring 9.8 on NIST within Atlassian's Confluence Server and Data Center editions Vulnerable Version 7.18.1 Run root@kitploit: python -m venv venv source venv/bin/activate pip...

SOC235---Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515

EVENTID-197...

EcoStruxure IT Data Center Expert < 9.1.2 Multiple Vulnerabilities (SEVD-2026-251-01)

The version of EcoStruxure IT Data Center Expert installed on the remote host is prior to 9.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SEVD-2026-251-01 advisory. - CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized...

VulnCheck KEV: CVE-2023-37569

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker ...

DoS (Denial of Service) at org.apache.tomcat:tomcat-coyote Dependency in Bamboo Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

DoS (Denial of Service) browserslist Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

DoS (Denial of Service) Bouncy Castle Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability known as CVE-2026-13506 was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Confluence Data Center

This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0,...

DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.9, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

DoS (Denial of Service) io.netty:netty-codec-http Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 7.4.0, 7.13.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vect...

DoS (Denial of Service) io.netty:netty-codec-http Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 7.4.0, 7.13.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vect...

Improper Authorization in Jira Service Management Data Center

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...

CVE-2022-22836

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:00+00:00| seen| https://t.me/hackingAttack/38115 2026-09-02 01:02:22+00:00| seen| https://t.me/hackingAttack/38115 2026-09-06 16:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/38115 2026-09-07 01:00:10+00:00|...

Injection fast-uri Dependency in Jira Software Data Center

This High severity Injection vulnerability was introduced in versions 10.2.1, 10.3.0, 10.4.0, 10.5.1, 10.6.0, 10.7.2, 11.0.0, 11.1.0, 11.2.1, and 11.3.0 of Jira Software Data Center. This Injection vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

Improper Authorization in Confluence Data Center

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...

EUVD-2026-62207

This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to gain unintended access and can lead...

EUVD-2026-62206

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...