CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Oct 13, 2023

High

CISA KEVRansomware

CVE-2023-22515

Atlassian—Confluence Data Center and Server

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.

Required Action

https://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html; https://nvd.nist.gov/vuln/detail/CVE-2023-22515

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Known
Published: Oct 5, 2023
KEV Added: Oct 5, 2023
Due Date: Oct 13, 2023
Related Articles: 0

Vendor

Atlassian

Confluence Data Center and Server