<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: atlassian-confluence-data-center</title><description>Every new CVE for atlassian-confluence-data-center.</description><link>https://agentprime.io/</link><item><title>CVE-2026-21589: Files accessible to external parties in Atlassian Bamboo Data Center and others</title><link>https://agentprime.io/advisories/CVE-2026-21589/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21589/</guid><description>CVSS 9.3 (Critical). Critical: In CISA’s KEV catalogue since 15 Oct 2026: it is known to be exploited. CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 21:30:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2026-21588: Uncontrolled resource consumption in Atlassian Confluence Data Center</title><link>https://agentprime.io/advisories/CVE-2026-21588/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21588/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21586: Improper authorization in Atlassian Confluence Data Center</title><link>https://agentprime.io/advisories/CVE-2026-21586/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21586/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21580: Cross-site scripting in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2026-21580/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21580/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Aug 2026 22:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21577: Uncontrolled resource consumption in Atlassian Confluence Data Center</title><link>https://agentprime.io/advisories/CVE-2026-21577/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21577/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21579: Information disclosure in Atlassian Confluence Data Center</title><link>https://agentprime.io/advisories/CVE-2026-21579/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21579/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-22166: Atlassian Confluence Data Center: This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of…</title><link>https://agentprime.io/advisories/CVE-2025-22166/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-22166/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Oct 2025 16:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22512: Uncontrolled resource consumption in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22512/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22512/</guid><description>CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Mar 2025 22:34:42 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-21703: Incorrect permission assignment in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21703/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21703/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Nov 2024 17:00:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21690: Cross-site scripting in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21690/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21690/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Aug 2024 16:05:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21686: Cross-site scripting in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21686/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21686/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jul 2024 20:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21683: Code injection in Atlassian Confluence Data Center</title><link>https://agentprime.io/advisories/CVE-2024-21683/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21683/</guid><description>CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.88 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 May 2024 23:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-21677: Path traversal in Atlassian Confluence Data Center</title><link>https://agentprime.io/advisories/CVE-2024-21677/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21677/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Mar 2024 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21678: Cross-site scripting in Atlassian Confluence Data Center</title><link>https://agentprime.io/advisories/CVE-2024-21678/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21678/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Feb 2024 18:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21673: Code injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21673/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21673/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 05:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21672: Code injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21672/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21672/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 05:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22527: Injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22527/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22527/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 24 Jan 2024: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 05:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-21674: Code injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21674/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21674/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 05:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22526: Code injection in Atlassian Confluence Data Center</title><link>https://agentprime.io/advisories/CVE-2023-22526/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22526/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 05:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22522: Injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22522/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22522/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Dec 2023 05:00:02 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-22518: Incorrect authorization in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22518/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22518/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 7 Nov 2023: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Oct 2023 14:30:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2023-22515: Improper input validation in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22515/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22515/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 5 Oct 2023: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.99 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Oct 2023 14:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2023-22508: Atlassian Confluence Data Center: This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was…</title><link>https://agentprime.io/advisories/CVE-2023-22508/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22508/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jul 2023 23:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22505: Atlassian Confluence Data Center: This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was…</title><link>https://agentprime.io/advisories/CVE-2023-22505/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22505/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jul 2023 21:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22504: Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability…</title><link>https://agentprime.io/advisories/CVE-2023-22504/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22504/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 May 2023 14:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22503: Information disclosure in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22503/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22503/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 May 2023 16:00:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-36290: Atlassian Confluence Server: The Livesearch macro in Confluence Server and Data Center before version 7.4.5…</title><link>https://agentprime.io/advisories/CVE-2020-36290/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-36290/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Jul 2022 04:05:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-26137: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.</title><link>https://agentprime.io/advisories/CVE-2022-26137/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-26137/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Jul 2022 17:25:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-26136: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.</title><link>https://agentprime.io/advisories/CVE-2022-26136/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-26136/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Jul 2022 17:25:18 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2022-26134: Expression language injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2022-26134/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-26134/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 2 Jun 2022: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Jun 2022 21:51:57 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2021-39114: Code injection in Atlassian Confluence Server and others</title><link>https://agentprime.io/advisories/CVE-2021-39114/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-39114/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 Apr 2022 04:00:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-43940: Uncontrolled search path in Atlassian Confluence Server and others</title><link>https://agentprime.io/advisories/CVE-2021-43940/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-43940/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Feb 2022 03:15:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26084: Expression language injection in Atlassian Confluence Server and others</title><link>https://agentprime.io/advisories/CVE-2021-26084/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26084/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Nov 2021: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Aug 2021 06:30:14 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2021-26085: Forced browsing in Atlassian Confluence Server and others</title><link>https://agentprime.io/advisories/CVE-2021-26085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26085/</guid><description>CVSS 5.3 (Medium). Critical: In CISA’s KEV catalogue since 28 Mar 2022: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Aug 2021 00:00:12 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2021-26072: Atlassian Confluence Server: The WidgetConnector plugin in Confluence Server and Confluence Data Center before version…</title><link>https://agentprime.io/advisories/CVE-2021-26072/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26072/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Apr 2021 18:10:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-29448: Atlassian Confluence Server: The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data…</title><link>https://agentprime.io/advisories/CVE-2020-29448/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-29448/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Feb 2021 15:08:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-4027: Atlassian Confluence Server: Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers…</title><link>https://agentprime.io/advisories/CVE-2020-4027/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-4027/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2020 01:35:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-20406: The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to writ…</title><link>https://agentprime.io/advisories/CVE-2019-20406/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-20406/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Feb 2020 03:10:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-20237: Atlassian Confluence Server: Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated…</title><link>https://agentprime.io/advisories/CVE-2018-20237/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-20237/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Feb 2019 18:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>