CVE-2023-22527 Scanner
CVE-2023-22527 Scanner - Remote Code Execution (RCE) vulnerability in Atlassian Confluence
Used 2.3k times · 5.9k assets checked · domain, ipv4, subdomain
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2023-22527
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
confluence data centerconfluence serverconfluence_data_centerconfluence_server
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: confluence data center
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →