Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Atlassian

Products: Confluence Data Center · Confluence Server

121.7

Score

4

CVEs

3

Active

1

PoC

3

KEV

#15

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2024-21683	2024-05-21	7.2v3.1	POC	—	Low	Low	no	0.0	Confluence Data Center	This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrary code which has high impact to confidential
CVE-2023-22527	2024-01-16	10.0v3.0	ACTIVE		Low	None	YES	40.6	Confluence Data CenterConfluence Server	A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server ar
CVE-2023-22518	2023-10-31	10.0v3.0	ACTIVE		Low	None	YES	40.6	Confluence Data CenterConfluence Server	All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform
CVE-2023-22515	2023-10-04	10.0v3.0	ACTIVE		Low	None	YES	40.6	Confluence Data CenterConfluence Server	Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluenc

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3