ACTIVELY EXPLOITED
CVE-2023-22515: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
| Vendor | Atlassian |
|---|---|
| Product | Confluence Data Center and Server |
| Actively exploited | Yes |
| Added to CISA KEV | 5 Oct 2023 |
| CISA federal deadline | 13 Oct 2023 |
| Ransomware use | Known |
Required action (CISA's text)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.
Description (NVD)
Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.
SOURCES
Other Atlassian flaws
- CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability
- CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability
- CVE-2023-22518: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
- CVE-2022-36804: Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.