UpHeron
All vulnerabilities

Servers and applications

CVE-2023-22515

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site…

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 5 Oct 2023.

Severity
Critical 9.8
Published
4 Oct 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
8.3.3, 8.4.3, 8.5.2
Sources
NVD

Affected software

SoftwareAffected versions
ConfluenceServers and applications · cpe:a:atlassian:confluence_data_center
  • From 8.0.0 before 8.3.3
  • From 8.4.0 before 8.4.3
  • From 8.5.0 before 8.5.2
ConfluenceServers and applications · cpe:a:atlassian:confluence_server
  • From 8.0.0 before 8.3.3
  • From 8.4.0 before 8.4.3
  • From 8.5.0 before 8.5.2

Known exploited

CISA name
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.
Due for US agencies
13 Oct 2023
Used in ransomware
Yes, known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-22515
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-22515