<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: atlassian-confluence-server</title><description>Every new CVE for atlassian-confluence-server.</description><link>https://agentprime.io/</link><item><title>CVE-2026-21580: Cross-site scripting in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2026-21580/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21580/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Aug 2026 22:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22512: Uncontrolled resource consumption in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22512/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22512/</guid><description>CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Mar 2025 22:34:42 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-21703: Incorrect permission assignment in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21703/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21703/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Nov 2024 17:00:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21690: Cross-site scripting in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21690/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21690/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Aug 2024 16:05:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21686: Cross-site scripting in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21686/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21686/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jul 2024 20:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21673: Code injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21673/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21673/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 05:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-21672: Code injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21672/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21672/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 05:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22527: Injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22527/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22527/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 24 Jan 2024: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 05:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-21674: Code injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2024-21674/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21674/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Jan 2024 05:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22522: Injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22522/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22522/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Dec 2023 05:00:02 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-22518: Incorrect authorization in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22518/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22518/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 7 Nov 2023: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Oct 2023 14:30:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2023-22515: Improper input validation in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22515/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22515/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 5 Oct 2023: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.99 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Oct 2023 14:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2023-22508: Atlassian Confluence Data Center: This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was…</title><link>https://agentprime.io/advisories/CVE-2023-22508/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22508/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jul 2023 23:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22505: Atlassian Confluence Data Center: This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was…</title><link>https://agentprime.io/advisories/CVE-2023-22505/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22505/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jul 2023 21:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22504: Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability…</title><link>https://agentprime.io/advisories/CVE-2023-22504/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22504/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 May 2023 14:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22503: Information disclosure in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2023-22503/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22503/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 May 2023 16:00:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-36290: Atlassian Confluence Server: The Livesearch macro in Confluence Server and Data Center before version 7.4.5…</title><link>https://agentprime.io/advisories/CVE-2020-36290/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-36290/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Jul 2022 04:05:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-26137: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.</title><link>https://agentprime.io/advisories/CVE-2022-26137/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-26137/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Jul 2022 17:25:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-26136: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.</title><link>https://agentprime.io/advisories/CVE-2022-26136/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-26136/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Jul 2022 17:25:18 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2022-26134: Expression language injection in Atlassian Confluence Data Center and others</title><link>https://agentprime.io/advisories/CVE-2022-26134/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-26134/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 2 Jun 2022: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Jun 2022 21:51:57 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2021-39114: Code injection in Atlassian Confluence Server and others</title><link>https://agentprime.io/advisories/CVE-2021-39114/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-39114/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 Apr 2022 04:00:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-43940: Uncontrolled search path in Atlassian Confluence Server and others</title><link>https://agentprime.io/advisories/CVE-2021-43940/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-43940/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Feb 2022 03:15:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26084: Expression language injection in Atlassian Confluence Server and others</title><link>https://agentprime.io/advisories/CVE-2021-26084/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26084/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Nov 2021: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Aug 2021 06:30:14 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2021-26085: Forced browsing in Atlassian Confluence Server and others</title><link>https://agentprime.io/advisories/CVE-2021-26085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26085/</guid><description>CVSS 5.3 (Medium). Critical: In CISA’s KEV catalogue since 28 Mar 2022: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Aug 2021 00:00:12 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2020-29445: Server-side request forgery in Atlassian Confluence Server</title><link>https://agentprime.io/advisories/CVE-2020-29445/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-29445/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 May 2021 06:10:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-29444: Cross-site scripting in Atlassian Confluence Server</title><link>https://agentprime.io/advisories/CVE-2020-29444/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-29444/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 May 2021 06:10:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26072: Atlassian Confluence Server: The WidgetConnector plugin in Confluence Server and Confluence Data Center before version…</title><link>https://agentprime.io/advisories/CVE-2021-26072/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26072/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Apr 2021 18:10:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-29448: Atlassian Confluence Server: The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data…</title><link>https://agentprime.io/advisories/CVE-2020-29448/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-29448/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Feb 2021 15:08:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-29450: Atlassian Confluence Server: Affected versions of Atlassian Confluence Server and Data Center allow remote attackers…</title><link>https://agentprime.io/advisories/CVE-2020-29450/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-29450/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Jan 2021 00:30:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-14175: Atlassian Confluence Server: Affected versions of Atlassian Confluence Server and Data Center allow remote attackers…</title><link>https://agentprime.io/advisories/CVE-2020-14175/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-14175/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Jul 2020 07:05:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-4027: Atlassian Confluence Server: Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers…</title><link>https://agentprime.io/advisories/CVE-2020-4027/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-4027/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2020 01:35:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-20102: Atlassian Confluence Server: The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0…</title><link>https://agentprime.io/advisories/CVE-2019-20102/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-20102/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2020 03:30:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-15006: Atlassian Confluence Server: There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews…</title><link>https://agentprime.io/advisories/CVE-2019-15006/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-15006/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Dec 2019 00:50:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-15005: Atlassian Bitbucket Server: The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an…</title><link>https://agentprime.io/advisories/CVE-2019-15005/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-15005/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Nov 2019 03:55:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-3394: Atlassian Confluence Server: There was a local file disclosure vulnerability in Confluence Server and Confluence Data…</title><link>https://agentprime.io/advisories/CVE-2019-3394/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-3394/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Aug 2019 14:32:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-3396: Path traversal in Atlassian Confluence Server</title><link>https://agentprime.io/advisories/CVE-2019-3396/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-3396/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Nov 2021: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Mar 2019 18:37:06 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2019-3395: Atlassian Confluence Server: The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7…</title><link>https://agentprime.io/advisories/CVE-2019-3395/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-3395/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Mar 2019 18:37:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-20237: Atlassian Confluence Server: Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated…</title><link>https://agentprime.io/advisories/CVE-2018-20237/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-20237/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Feb 2019 18:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-9505: Atlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to view a page when creating a workbox notification about new comments.</title><link>https://agentprime.io/advisories/CVE-2017-9505/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-9505/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Jun 2017 16:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>