Atlassian Confluence <8.8.0
productDEA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical7high0medium0low
updated 2026-10-27
01
vulnerabilities (31)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2023-41835US | high7.5 | — |
| CVE-2023-46589US | high7.5 | — |
| CVE-2023-39410US | high7.5 | — |
| CVE-2023-5072US | high7.5 | — |
| CVE-2024-20965US | — | — |
| CVE-2024-20962US | — | — |
| CVE-2024-20960US | — | — |
| CVE-2024-20985US | — | — |
| CVE-2024-20963US | — | — |
| CVE-2024-20961US | — | — |
| CVE-2024-20982US | — | — |
| CVE-2024-20976US | — | — |
| CVE-2024-20972US | — | — |
| CVE-2024-20970US | — | — |
| CVE-2024-20966US | — | — |
| CVE-2024-20977US | — | — |
| CVE-2024-20973US | — | — |
| CVE-2024-20984US | — | — |
| CVE-2024-20981US | — | — |
| CVE-2024-20971US | — | — |
| CVE-2024-20978US | — | — |
| CVE-2024-20964US | — | — |
| CVE-2024-20983US | — | — |
| CVE-2023-6378US | high7.5 | — |
| CVE-2024-20975US | — | — |
| CVE-2024-20974US | — | — |
| CVE-2024-20968US | — | — |
| CVE-2024-20969US | — | — |
| CVE-2024-21634US | high7.5 | — |
| CVE-2024-20967US | — | — |
| CVE-2023-6481US | high7.5 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-20Improper Input Validation21 CVEs
- CWE-400Uncontrolled Resource Consumption14 CVEs
- CWE-404Improper Resource Shutdown or Release6 CVEs
- CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
- CWE-502Deserialization of Untrusted Data2 CVEs
- CWE-284Improper Access Control1 CVEs
- CWE-358Improperly Implemented Security Check for Standard1 CVEs
- CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)31 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan