CVE-2023-22512
Confluence Server vulnerability analysis and mitigation

This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server. With a CVSS Score of 7.5, this vulnerability allows an unauthenticated attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely disrupting services of a vulnerable host (Confluence instance) connected to a network, which has no impact to confidentiality, no impact to integrity, high impact to availability, and requires no user interaction. Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Confluence Data Center and Server 7.19: Upgrade to a release greater than or equal to 7.19.14 Confluence Data Center and Server 8.5: Upgrade to a release greater than or equal to 8.5.1 Confluence Data Center and Server 8.6 or above: No need to upgrade, you're already on a patched version See the release notes (https://confluence.atlassian.com/doc/confluence-release-notes-327.html ). You can download the latest version of Confluence Data Center and Server from the download center (https://www.atlassian.com/software/confluence/download-archives ]). This vulnerability was reported via our Bug Bounty program.


SourceNVD

Related Confluence Server vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2024-21683HIGH8.8
  • Atlassian Fisheye & CrucibleAtlassian Fisheye & Crucible
  • cpe:2.3:a:atlassian:confluence_server
NoYesMay 21, 2024
CVE-2024-21686HIGH8.7
  • Confluence ServerConfluence Server
  • cpe:2.3:a:atlassian:confluence_server
NoYesJul 16, 2024
CVE-2025-22166HIGH8.3
  • Confluence ServerConfluence Server
  • cpe:2.3:a:atlassian:confluence_server
NoYesOct 21, 2025
CVE-2024-21690HIGH8.2
  • Confluence ServerConfluence Server
  • cpe:2.3:a:atlassian:confluence_server
NoYesAug 21, 2024
CVE-2024-21703MEDIUM6.4
  • Confluence ServerConfluence Server
  • cpe:2.3:a:atlassian:confluence_server
NoYesNov 27, 2024

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management