In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.
| Attack Vector (AV) | Network | Adjacent | Local | Physical |
|---|---|---|---|---|
| Attack Complexity (AC) | LOW | High | ||
| Privileges Required (PR) | None | Low | High | |
| User Interaction (UI) | None | Required | ||
| Scope (S) | Unchange | Change | ||
| Confidentiality (C) | None | Low | High | |
| Integrity (I) | None | Low | High | |
| Availability (A) | None | Low | High |
| Attack Vector (AV) | Network | Adjacent | Local |
|---|---|---|---|
| Access Complexity (AC) | Low | Medium | High |
| Authentication (Au) | None | Single | Multiple |
| Confidentiality (C) | None | Parical | Complete |
| Integrity (I) | None | Partial | Complete |
| Availability (A) | None | Partial | Complete |
| CVE Infomation | Exploits or more Infomation |
|---|---|
| mitre | EXPLOIT DATABASE |
| NVD | 0day.today |
| vulmon.com | github |
| CVE Details | |
| JVN ENG JPN | |
| Reconshell |
Software Tag: Android(1 tweets) Apache(1 tweets) Apple(1 tweets) BIG-IP(1 tweets) Java(20 tweets) Linux(17 tweets) MySQL(1 tweets) Oracle(1 tweets) PHP(3 tweets) Tomcat(3 tweets) VPN(6 tweets) Weblogic(6 tweets) Windows(14 tweets) Wordpress(82 tweets) iOS(2 tweets)
List of frequently cited URLs
List of frequently cited URLs