Description
Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Confluence Data Center | Atlassian / Confluence Data Center | >= 6.14.0, < unspecified | affected |
| Confluence Data Center | Atlassian / Confluence Data Center | >= 7.12.0, < unspecified | affected |
| Confluence Data Center | Atlassian / Confluence Data Center | >= 7.5.0, < unspecified | affected |
| Confluence Data Center | Atlassian / Confluence Data Center | >= unspecified, < 7.12.5 | affected |
| Confluence Data Center | Atlassian / Confluence Data Center | >= unspecified, < 6.13.23 | affected |
| Confluence Data Center | Atlassian / Confluence Data Center | >= unspecified, < 7.4.11 | affected |
| Confluence Data Center | Atlassian / Confluence Data Center | >= unspecified, < 7.11.6 | affected |
| Confluence Server | Atlassian / Confluence Server | >= 6.14.0, < unspecified | affected |
| Confluence Server | Atlassian / Confluence Server | >= 7.12.0, < unspecified | affected |
| Confluence Server | Atlassian / Confluence Server | >= 7.5.0, < unspecified | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 7.12.5 | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 7.4.11 | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 6.13.23 | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 7.11.6 | affected |