{"schema_version":1,"title":"Atlassian Confluence Server vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in Atlassian Confluence Server: 0 in the last 7 days and 0 in the last 90 days, 9 of them critical and 9 exploited in the wild. The most recent, CVE-2023-22527, was published on 24 January 2024.","url":"https://junglewise.ai/threats/technologies/confluence-server","json_url":"https://junglewise.ai/threats/technologies/confluence-server.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/confluence-server","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":10,"critical":9,"exploited":9,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":0},"latest":[{"cve":"CVE-2023-22527","cvss":10,"slug":"cve-2023-22527-atlassian-confluence-data-center-and-server-template-injection","title":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22527-atlassian-confluence-data-center-and-server-template-injection"},{"cve":"CVE-2023-22518","cvss":10,"slug":"cve-2023-22518-atlassian-confluence-data-center-and-server-improper","title":"Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22518-atlassian-confluence-data-center-and-server-improper"},{"cve":"CVE-2023-22515","cvss":10,"slug":"cve-2023-22515-atlassian-confluence-data-center-and-server-broken-access-control","title":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22515-atlassian-confluence-data-center-and-server-broken-access-control"},{"cve":"CVE-2022-26138","cvss":9.8,"slug":"cve-2022-26138-atlassian-questions-for-confluence-app-hard-coded-credentials","title":"Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","severity":"critical","exploited":true,"published_at":"2022-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26138-atlassian-questions-for-confluence-app-hard-coded-credentials"},{"cve":"CVE-2022-26134","cvss":9.8,"slug":"cve-2022-26134-atlassian-confluence-server-and-data-center-remote-code-execution","title":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26134-atlassian-confluence-server-and-data-center-remote-code-execution"},{"cve":"CVE-2021-26085","cvss":5.3,"slug":"cve-2021-26085-atlassian-confluence-server-pre-authorization-arbitrary-file-read","title":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26085-atlassian-confluence-server-pre-authorization-arbitrary-file-read"},{"cve":"CVE-2019-3396","cvss":9.8,"slug":"cve-2019-3396-atlassian-confluence-server-and-data-center-server-side-template","title":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-3396-atlassian-confluence-server-and-data-center-server-side-template"},{"cve":"CVE-2019-3398","cvss":8.8,"slug":"cve-2019-3398-atlassian-confluence-server-and-data-center-path-traversal","title":"Atlassian Confluence Server and Data Center Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-3398-atlassian-confluence-server-and-data-center-path-traversal"},{"cve":"CVE-2021-26084","cvss":9.8,"slug":"cve-2021-26084-atlassian-confluence-server-and-data-center-object-graph","title":"Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26084-atlassian-confluence-server-and-data-center-object-graph"},{"cve":"CVE-2016-6668","cvss":7.5,"slug":"cve-2016-6668-atlassian-hipchat-integration-plugin-secret-key-disclosure","title":"Atlassian HipChat Integration Plugin secret key disclosure","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.36+00:00","url":"https://junglewise.ai/threats/cve-2016-6668-atlassian-hipchat-integration-plugin-secret-key-disclosure"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Atlassian Confluence Data Center","slug":"confluence-data-center","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/confluence-data-center"},{"name":"Atlassian Temporal Server","slug":"server","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/server"},{"name":"Atlassian Data Center","slug":"data-center","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/data-center"}],"technology":{"hub":true,"name":"Atlassian Confluence Server","slug":"confluence-server","vendor":{"name":"Atlassian","slug":"atlassian","url":"https://junglewise.ai/threats/vendors/atlassian"},"aliases":[],"category":"cms","homepage":"https://www.atlassian.com/software/confluence","description":"A collaborative workspace and documentation platform used for team knowledge sharing and project management.","url":"https://junglewise.ai/threats/technologies/confluence-server"},"most_severe":[{"cve":"CVE-2023-22527","cvss":10,"slug":"cve-2023-22527-atlassian-confluence-data-center-and-server-template-injection","title":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22527-atlassian-confluence-data-center-and-server-template-injection"},{"cve":"CVE-2023-22518","cvss":10,"slug":"cve-2023-22518-atlassian-confluence-data-center-and-server-improper","title":"Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","severity":"critical","exploited":true,"published_at":"2023-11-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22518-atlassian-confluence-data-center-and-server-improper"},{"cve":"CVE-2023-22515","cvss":10,"slug":"cve-2023-22515-atlassian-confluence-data-center-and-server-broken-access-control","title":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-22515-atlassian-confluence-data-center-and-server-broken-access-control"},{"cve":"CVE-2022-26138","cvss":9.8,"slug":"cve-2022-26138-atlassian-questions-for-confluence-app-hard-coded-credentials","title":"Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","severity":"critical","exploited":true,"published_at":"2022-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26138-atlassian-questions-for-confluence-app-hard-coded-credentials"},{"cve":"CVE-2022-26134","cvss":9.8,"slug":"cve-2022-26134-atlassian-confluence-server-and-data-center-remote-code-execution","title":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26134-atlassian-confluence-server-and-data-center-remote-code-execution"},{"cve":"CVE-2019-3396","cvss":9.8,"slug":"cve-2019-3396-atlassian-confluence-server-and-data-center-server-side-template","title":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-3396-atlassian-confluence-server-and-data-center-server-side-template"},{"cve":"CVE-2021-26084","cvss":9.8,"slug":"cve-2021-26084-atlassian-confluence-server-and-data-center-object-graph","title":"Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26084-atlassian-confluence-server-and-data-center-object-graph"},{"cve":"CVE-2019-3398","cvss":8.8,"slug":"cve-2019-3398-atlassian-confluence-server-and-data-center-path-traversal","title":"Atlassian Confluence Server and Data Center Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-3398-atlassian-confluence-server-and-data-center-path-traversal"},{"cve":"CVE-2021-26085","cvss":5.3,"slug":"cve-2021-26085-atlassian-confluence-server-pre-authorization-arbitrary-file-read","title":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-26085-atlassian-confluence-server-pre-authorization-arbitrary-file-read"},{"cve":"CVE-2016-6668","cvss":7.5,"slug":"cve-2016-6668-atlassian-hipchat-integration-plugin-secret-key-disclosure","title":"Atlassian HipChat Integration Plugin secret key disclosure","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.36+00:00","url":"https://junglewise.ai/threats/cve-2016-6668-atlassian-hipchat-integration-plugin-secret-key-disclosure"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}