CVE-2023-22527CISA KEV
Atlassian Confluence Data Center and Server Template Injection Vulnerability
CISA lists this Atlassian Confluence Data Center and Server vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution.
- Product
- Confluence Data Center and Server
- Added to KEV
- 24 Jan 2024
- Federal remediation due
- 14 Feb 2024
- Known ransomware use
- Yes
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.