Atlassian Atlassian Confluence <8.5.25

Name: Atlassian Atlassian Confluence <8.5.25
Brand: Atlassian

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

2critical15high0medium0low

updated 2026-10-27

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-41993US	high8.8OT critical	24.3% (98th)	KEV	8.5.25	2023-09-21	< 8.5.25
CVE-2024-2961US	—	88.3% (100th)	Exploit	8.5.25	2024-04-17	< 8.5.25
CVE-2024-41110US	—OT elevated	16.5% (97th)	Exploit	8.5.25	2024-07-24	< 8.5.25
CVE-2023-39325US	high7.5	3.80% (90th)	Exploit	8.5.25	2023-10-11	< 8.5.25
CVE-2024-0406US	high7.8	0.93% (60th)	Exploit	8.5.25	2024-04-06	< 8.5.25
CVE-2024-45590US	high7.5	0.82% (57th)	Exploit	8.5.25	2024-09-10	< 8.5.25
CVE-2024-33883US	—	0.61% (49th)	Exploit	8.5.25	2024-04-28	< 8.5.25
CVE-2024-6119US	high7.5	66.6% (99th)	—	8.5.25	2024-09-03	< 8.5.25
CVE-2024-2398US	—	36.1% (98th)	—	8.5.25	2024-03-27	< 8.5.25
CVE-2022-24795US	high7.5	3.47% (89th)	—	8.5.25	2022-04-05	< 8.5.25
CVE-2023-45283US	high7.5	2.76% (86th)	—	8.5.25	2023-11-09	< 8.5.25
CVE-2022-31163US	high8.1	2.45% (84th)	—	8.5.25	2022-07-22	< 8.5.25
CVE-2021-41186US	high7.5	2.21% (83rd)	—	8.5.25	2021-10-29	< 8.5.25
CVE-2021-32740US	high7.5	2.14% (82nd)	—	8.5.25	2021-07-06	< 8.5.25
CVE-2024-6345US	—	1.94% (80th)	—	8.5.25	2024-07-15	< 8.5.25
CVE-2024-37371US	critical9.1	1.86% (79th)	—	8.5.25	2024-06-28	< 8.5.25
CVE-2024-27281US	—	1.57% (75th)	—	8.5.25	2024-05-14	< 8.5.25
CVE-2024-4068US	—	1.47% (74th)	—	8.5.25	2024-05-14	< 8.5.25
CVE-2024-37890US	—	1.36% (72nd)	—	8.5.25	2024-06-17	< 8.5.25
CVE-2024-47554US	—	1.31% (71st)	—	8.5.25	2024-10-03	< 8.5.25
CVE-2024-33599US	—	1.31% (70th)	—	8.5.25	2024-05-06	< 8.5.25
CVE-2024-41123US	high7.5	1.28% (70th)	—	8.5.25	2024-08-01	< 8.5.25
CVE-2024-24786US	—	1.26% (69th)	—	8.5.25	2024-03-05	< 8.5.25
CVE-2024-39338US	high7.5	1.21% (68th)	—	8.5.25	2024-08-12	< 8.5.25
CVE-2024-41946US	high7.5	1.19% (68th)	—	8.5.25	2024-08-01	< 8.5.25
CVE-2024-45491US	critical9.8	1.13% (66th)	—	8.5.25	2024-08-30	< 8.5.25
CVE-2024-29857US	—	1.10% (66th)	—	8.5.25	2024-05-14	< 8.5.25
CVE-2022-0759US	high8.1	0.94% (61st)	—	8.5.25	2022-03-25	< 8.5.25
CVE-2024-45296US	—	0.93% (61st)	—	8.5.25	2024-09-09	< 8.5.25
CVE-2024-20952US	—	0.92% (60th)	—	8.5.25	2024-01-16	< 8.5.25
CVE-2024-20918US	—	0.92% (60th)	—	8.5.25	2024-01-16	< 8.5.25
CVE-2024-37370US	high7.5OT elevated	0.75% (55th)	—	8.5.25	2024-06-28	< 8.5.25
CVE-2023-6597US	—	0.31% (24th)	—	8.5.25	2024-03-19	< 8.5.25
CVE-2024-47220US	—	—	—	8.5.25	2024-09-22	< 8.5.25

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption8 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency2 CVEs
CWE-1333Inefficient Regular Expression Complexity2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan