CVE-2022-26134

Analyzed
Published: 03 Jun 2022, 21:51
Last modified:21 Oct 2025, 23:15

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (cve.org)
EPSS Score
100% CRITICAL
100% probability +5.59%
KEV
Listed
CISA • ENISA
2 listings
Ransomware
Known Use
Public exploits
4 found
Dark Web
Not detected

Timeline

03 Jun 2022, 21:51
Published
Vulnerability first disclosed
02 Jun 2022, 00:00
Added to CISA KEV
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
06 Jun 2022, 00:00
CISA Remediation Due
Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.
21 Oct 2025, 23:15
Last Modified
Vulnerability information updated
31 Jul 2026, 00:00
Added to ENISA KEV
Added to Known Exploited Vulnerabilities catalog

Description

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 100.00%• Percentile: 100%

Techniques & Countermeasures

  • CWE-917•Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

    The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.

Affected Systems

  • atlassian•confluence_data_center

    ≥ next of 1.3.0, < unspecified | ≥ unspecified, < 7.4.17 | ≥ 7.13.0, < unspecified | ≥ unspecified, < 7.13.7 | ≥ 7.14.0, < unspecified | ≥ unspecified, < 7.14.3 | ≥ 7.15.0, < unspecified | ≥ unspecified, < 7.15.2 | ≥ 7.16.0, < unspecified | ≥ unspecified, < 7.16.4 | ≥ 7.17.0, < unspecified | ≥ unspecified, < 7.17.4 | ≥ 7.18.0, < unspecified | ≥ unspecified, < 7.18.1 | ≥ 1.3, < 7.4.17 | ≥ 7.13.0, < 7.13.7 | ≥ 7.14.0, < 7.14.3 | ≥ 7.15.0, < 7.15.2 | ≥ 7.16.0, < 7.16.4 | ≥ 7.17.0, < 7.17.4 | 7.18.0

  • atlassian•confluence_server

    ≥ next of 1.3.0, < unspecified | ≥ unspecified, < 7.4.17 | ≥ 7.13.0, < unspecified | ≥ unspecified, < 7.13.7 | ≥ 7.14.0, < unspecified | ≥ unspecified, < 7.14.3 | ≥ 7.15.0, < unspecified | ≥ unspecified, < 7.15.2 | ≥ 7.16.0, < unspecified | ≥ unspecified, < 7.16.4 | ≥ 7.17.0, < unspecified | ≥ unspecified, < 7.17.4 | ≥ 7.18.0, < unspecified | ≥ unspecified, < 7.18.1 | ≥ 1.3, < 7.4.17 | ≥ 7.13.0, < 7.13.7 | ≥ 7.14.0, < 7.14.3 | ≥ 7.15.0, < 7.15.2 | ≥ 7.16.0, < 7.16.4 | ≥ 7.17.0, < 7.17.4 | 7.18.0

References (7)