What’s Vulnerable › Products
Atlassian Confluence Data Center vulnerabilities
50 known vulnerabilities, 8 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your Atlassian Confluence Data Center version is affected
Exploited Atlassian Confluence Data Center vulnerabilities
- CVE-2023-22527 — Atlassian Confluence Data Center and Server Template Injection Vulnerability
- CVE-2023-22518 — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
- CVE-2023-22515 — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
- CVE-2022-26134 — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
- CVE-2021-26085 — Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
- CVE-2021-26084 — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
- CVE-2019-3398 — Atlassian Confluence Server and Data Center Path Traversal Vulnerability
- CVE-2019-3396 — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
Latest Atlassian Confluence Data Center vulnerabilities
- CVE-2026-21580 — (CVSS 9.3)
- CVE-2025-22166 — (CVSS 7.5)
- CVE-2024-21703 — (CVSS 6.4)
- CVE-2024-21690 — (CVSS 8.2)
- CVE-2024-21686 — (CVSS 8.7)
- CVE-2024-21683 — (CVSS 8.8)
- CVE-2024-21677 — (CVSS 8.8)
- CVE-2024-21678 — (CVSS 8.5)
- CVE-2023-22512 — (CVSS 7.5)
- CVE-2024-21674 — (CVSS 7.5)
- CVE-2024-21673 — (CVSS 8.8)
- CVE-2024-21672 — (CVSS 8.8)
- CVE-2023-22527 — Atlassian Confluence Data Center and Server Template Injection Vulnerability (CVSS 9.8) — exploited
- CVE-2023-22526 — (CVSS 8.8)
- CVE-2023-22522 — (CVSS 8.8)
- CVE-2023-22518 — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability (CVSS 9.8) — exploited
- CVE-2023-22515 — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability (CVSS 9.8) — exploited
- CVE-2023-22508 — (CVSS 8.8)
- CVE-2023-22505 — (CVSS 8.8)
- CVE-2023-22504 — (CVSS 6.5)
- CVE-2023-22503 — (CVSS 5.3)
- CVE-2020-36290 — (CVSS 5.4)
- CVE-2022-26137 — (CVSS 8.8)
- CVE-2022-26136 — (CVSS 9.8)
- CVE-2022-26134 — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability (CVSS 9.8) — exploited