Sploitus

159 exploited vulnerabilities in Confluence

Showing 1–50 of 159, highest-scoring first

Vendors
Apache, Atlassian, Linux Mint, Red Os, Canonical, Npm
With known exploits
159
Affected Apache Tomcat versions
≤ 7.0.109, 8.5.100, 9.0.118, 10.1.55, 11.0.22, 9.0.104, 10.1.40, 11.0.6, 11.0.0, 9.0.98, 10.1.34, 11.0.2, 9.0.116, 10.1.53, 11.0.20, 10.1.0
Affected Axios versions
< 0.31.1, 1.15.1, 0.31.0, 1.15.0, 1.16.0
Affected Apache Tika versions
< 3.2.2
Affected Apache Commons Configuration versions
< 2.10.1
Affected Postgresql Postgresql Jdbc Driver versions
< 42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
Affected Atlassian Confluence Data Center versions
< 8.5.4, 8.7.0, 7.19.16, 8.3.4, 8.4.4, 8.5.3, 8.6.0, 8.3.3, 8.4.3, 8.5.2, 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.0, 6.13.23, 7.4.11, 7.11.6, 7.12.5
Affected Atlassian Confluence Server versions
< 8.3.3, 8.4.3, 8.5.2, 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.0, 6.13.23, 7.4.11, 7.11.6, 7.12.5, 6.6.12, 6.12.3, 6.13.3, 6.14.2
Affected Snakeyaml Project Snakeyaml versions
< 2.0

Vulnerabilities with exploits

Highest CVSS first — 23 of these already have exploit code on Sploitus

CVE-2026-43512 1 exploit
CVSS 10.0 CRITICAL 2026-05-11FIX AVAILABLE
Exploit for CVE-2026-43512
CVE-2026-41293
CVSS 10.0 CRITICAL 2026-05-11FIX AVAILABLE
CVE-2026-42043
CVSS 10.0 CRITICAL 2026-04-24FIX AVAILABLE
CVE-2026-40175 4 exploits
CVSS 10.0 CRITICAL 2026-04-09FIX AVAILABLE
Exploit for CVE-2026-40175Exploit for CVE-2026-40175
CVE-2025-66516 5 exploits
CVSS 10.0 CRITICAL 2025-10-26FIX AVAILABLE
Exploit for Improper Restriction of XML External Entity Reference in Apache TikaExploit for CVE-2025-66516
CVE-2025-54988 4 exploits
CVSS 10.0 CRITICAL 2025-08-20FIX AVAILABLE
Exploit for CVE-2025-66516Exploit for CVE-2025-66516
CVE-2025-48387
CVSS 10.0 HIGH 2025-05-22FIX AVAILABLE
CVE-2025-31650 5 exploits
CVSS 10.0 HIGH 2025-04-08FIX AVAILABLE
Exploit for Incomplete Cleanup in Apache Tomcat📄 Apache Tomcat 10.1.39 Denial of Service
CVE-2024-50379 13 exploits
CVSS 10.0 CRITICAL 2024-03-05FIX AVAILABLE
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache TomcatExploit for CVE-2025-55752
CVE-2024-29415
CVSS 10.0 HIGH 2024-05-06
CVE-2024-29131
CVSS 10.0 HIGH 2024-03-13FIX AVAILABLE
CVE-2024-29133
CVSS 10.0 HIGH 2024-03-17FIX AVAILABLE
CVE-2023-42282
CVSS 10.0 CRITICAL 2024-02-08FIX AVAILABLE
CVE-2024-1597
CVSS 10.0 CRITICAL 2024-02-19FIX AVAILABLE
CVE-2023-22527 32 exploits
CVSS 10.0 CRITICAL 2024-01-15FIX AVAILABLE
BAREExploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2023-22518 13 exploits
CVSS 10.0 CRITICAL 2023-02-17FIX AVAILABLE
Exploit for Incorrect Authorization in Atlassian Confluence_Data_CenterExploit for Incorrect Authorization in Atlassian Confluence_Data_Center
CVE-2023-22515 38 exploits
CVSS 10.0 CRITICAL 2023-10-04FIX AVAILABLE
Exploit for Improper Input Validation in Atlassian Confluence_Data_CenterExploit for Improper Input Validation in Atlassian Confluence_Data_Center
CVE-2022-1471 9 exploits
CVSS 10.0 HIGH 2022-04-11FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Snakeyaml_Project SnakeyamlExploit for Deserialization of Untrusted Data in Snakeyaml_Project Snakeyaml
CVE-2022-26134 76 exploits
CVSS 10.0 CRITICAL 2021-03-06FIX AVAILABLE
Exploit for Expression Language Injection in Atlassian Confluence_Data_CenterExploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2021-26084 44 exploits
CVSS 10.0 CRITICAL 2021-07-27FIX AVAILABLE
Exploit for Expression Language Injection in Atlassian Confluence_Data_CenterExploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2019-3396 19 exploits
CVSS 10.0 CRITICAL 2019-02-28FIX AVAILABLE
Exploit for Path Traversal in Atlassian Confluence_ServerExploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2026-42585
CVSS 9.8 CRITICAL 2026-05-05FIX AVAILABLE
CVE-2026-2332
CVSS 9.8 CRITICAL 2026-04-14FIX AVAILABLE
CVE-2026-4800
CVSS 9.8 CRITICAL 2021-05-06FIX AVAILABLE
CVE-2026-33871
CVSS 9.8 CRITICAL 2026-03-24FIX AVAILABLE
CVE-2026-29063
CVSS 9.8 CRITICAL 2026-03-04FIX AVAILABLE
CVE-2024-56337 1 exploit
CVSS 9.8 CRITICAL 2024-12-09FIX AVAILABLE
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
CVE-2024-47561
CVSS 9.8 CRITICAL 2024-10-03FIX AVAILABLE
CVE-2022-37601
CVSS 9.8 CRITICAL 2022-10-12FIX AVAILABLE
CVE-2022-45143
CVSS 9.8 CRITICAL 2022-11-09FIX AVAILABLE
CVE-2022-42252
CVSS 9.8 CRITICAL 2022-10-11FIX AVAILABLE
CVE-2022-26138 1 exploit
CVSS 9.8 CRITICAL 2022-07-20FIX AVAILABLE
Exploit for Use of Hard-coded Credentials in Atlassian Questions_For_Confluence
CVE-2026-44494
CVSS 9.7 HIGH 2026-04-16FIX AVAILABLE
CVE-2026-43515 1 exploit
CVSS 9.4 CRITICAL 2026-05-11FIX AVAILABLE
Exploit for Improper Authorization in Apache Tomcat
CVE-2026-42584
CVSS 9.4 CRITICAL 2026-05-05FIX AVAILABLE
CVE-2026-29145 2 exploits
CVSS 9.4 CRITICAL 2026-03-23FIX AVAILABLE
Exploit for Improper Authentication in Apache TomcatExploit for Improper Authentication in Apache Tomcat
CVE-2024-22871
CVSS 9.4 HIGH 2024-02-28FIX AVAILABLE
CVE-2024-22259 1 exploit
CVSS 9.4 HIGH 2024-03-14FIX AVAILABLE
Exploit for CVE-2024-22243
CVE-2024-22243 1 exploit
CVSS 9.4 HIGH 2024-02-21FIX AVAILABLE
Exploit for CVE-2024-22243
CVE-2022-1231
CVSS 9.3 CRITICAL 2022-04-15FIX AVAILABLE
CVE-2026-42579
CVSS 9.1 CRITICAL 2026-05-05FIX AVAILABLE
CVE-2026-42264
CVSS 9.1 CRITICAL 2026-05-05FIX AVAILABLE
CVE-2025-62718
CVSS 9.0 HIGH 2026-04-09FIX AVAILABLE
CVE-2026-23950
CVSS 9.0 HIGH 2026-01-20FIX AVAILABLE
CVE-2024-21683 9 exploits
CVSS 9.0 HIGH 2024-05-21FIX AVAILABLE
Exploit for Code Injection in Atlassian Confluence_Data_CenterAtlassian Confluence Administrator Code Macro Remote Code Execution Exploit
CVE-2022-46175
CVSS 9.0 HIGH 2022-12-23FIX AVAILABLE
CVE-2019-3398 9 exploits
CVSS 9.0 HIGH 2019-04-18FIX AVAILABLE
Atlassian Confluence 6.15.1 - Directory Traversal VulnerabilityAtlassian Confluence 6.15.1 - Directory Traversal Exploit
CVE-2025-53689
CVSS 8.8 HIGH 2025-07-14FIX AVAILABLE
CVE-2024-4367 16 exploits
CVSS 8.8 HIGH 2023-10-30FIX AVAILABLE
Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla FirefoxExploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox
CVE-2019-3394 1 exploit
CVSS 8.8 HIGH 2019-08-29FIX AVAILABLE
Confluence Server Local File Disclosure