QID 730516

Date Published: 2022-06-09

QID 730516: Atlassian Confluence Server and Confluence Data Center Remote Code Execution (RCE) Vulnerability (CONFSERVER-78586)

Confluence is team collaboration software written in Java.



Affected version:
Confluence Server and Data Center versions prior to 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, and 7.18.1 are affected

QID Detection Logic:(Unauthenticated)
It checks for vulnerable version of Atlassian Confluence Server.

Successful exploitation of this vulnerability could lead to a security breach or could affect confidentiality, integrity, and availability.

  • CVSS V3 rated as Critical - 9.8 severity.
  • CVSS V2 rated as High - 7.5 severity.
  • Solution
    Customers are advised to refer to CONFSERVER-78586 for updates pertaining to this vulnerability.
    Vendor References

    CVEs related to QID 730516

    Software Advisories
    Advisory ID Software Component Link
    CONFSERVER-78586 URL Logo jira.atlassian.com/browse/CONFSERVER-78586