PT-2026-62000 · Atlassian · Confluence
CVE-2026-21579
·
Published
2026-07-21
·
Updated
2026-08-11
CVSS v4.0
8.2
High
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Confluence Data Center versions 7.17.0
Confluence Data Center version 7.19.0
Confluence Data Center version 8.5.0
Confluence Data Center version 8.9.0
Confluence Data Center version 9.0.1
Confluence Data Center version 9.1.0
Confluence Data Center version 9.2.0
Confluence Data Center version 10.0.2
Confluence Data Center version 10.1.0
Confluence Data Center version 10.2.0
Description
An unauthenticated attacker can view sensitive information due to an information disclosure flaw.
Recommendations
For version 9.2.0, upgrade to a release greater than or equal to 9.2.22.
For version 10.2.0, upgrade to a release greater than or equal to 10.2.14.
For versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 10.0.2, and 10.1.0, upgrade to the latest version.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Confluence