S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2022-26134 Scanner

CVE-2022-26134 scanner - OGNL Injection (Object-Graph Navigation Language) vulnerability in Atlassian Confluence Data Center and Confluence Server

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.8k
Times Used
continuous scan runs
5.5k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVECVE-2022-26134
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Confluence Data Centerby Atlassian
AFFECTED< unspecifiedSAFE ✓≥ unspecified
Confluence Serverby Atlassian
AFFECTED< unspecifiedSAFE ✓≥ unspecified
Updated Aug 22, 2026View on NVD →
Detail

Atlassian Confluence Data Center is a collaboration tool that is widely used by businesses and organizations to manage their documentation, projects, and workflows. With Confluence, teams can work together in real-time to create, share and collaborate on information, all in one centralized location. The platform allows users to create and edit various types of content such as pages, blogs, discussion forums, and multimedia files. It is a popular solution for companies seeking to streamline their communication and content creation processes, saving time and boosting productivity.

Recently, a vulnerability known as CVE-2022-26134 was detected within the Atlassian Confluence Data Center software. This vulnerability is an OGNL injection flaw that would permit an unauthorized individual to execute code on a Confluence Server or Data Center instance. The issues are found in various versions of Confluence ranging from 1.3.0 up to 7.18.0. 

This vulnerability can be a significant risk for companies using Atlassian Confluence Data Center. By exploiting this vulnerability, attackers could penetrate the system and gain access to sensitive data and information, including corporate secrets, confidential data, and personnel records. Moreover, exploitation of this vulnerability would enable the attacker to execute arbitrary code on a server or data center instance, leading to complete system compromise and resulting in damage to business operations.

In conclusion, Atlassian Confluence Data Center is an excellent collaboration tool for businesses and organizations, but it is not immune to security issues. CVE-2022-26134 is a vulnerability that can lead to severe consequences for an organization if exploited. It's essential to take precautions to mitigate the potential impact of this vulnerability. Thanks to the pro features of the s4e.io platform, users can stay informed about any current or potential vulnerabilities and take necessary steps to secure their digital assets.

 

REFERENCES

Solution Advice

To protect against this vulnerability, it's essential to be proactive and take necessary precautions, including: 

  • Installing the latest patches for this vulnerability
  • Regularly monitoring for unusual network behavior
  • Updating security controls on the server and in the network
  • Implementing security policies aimed at preventing unauthorized access to critical systems
  • Conducting regular security audits to ensure that the latest security protocols are adhered to.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

CVE-2022-26134 scanner - OGNL Injection (Object-Graph Navigation Language) vulnerability in Atlassian Confluence Data Center and Confluence Server | S4E