According to its self-reported version number, the Atlassian Confluence application running on the remote host is 8.x prior to 8.3.3, 8.4.x prior to 8.4.3 or 8.5.x prior to 8.5.2. It is, therefore, affected by a privilege escalation vulnerability.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-92475 advisory.

  - Privilege Escalation in Confluence Data Center and Server - CVE-2023-22515 (CVE-2023-22515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Atlassian Confluence Server running on the remote host has a confirmed vulnerability as referenced in the CONFSERVER-92475 advisory.
  - Privilege Escalation in Confluence Data Center and Server - CVE-2023-22515 (CVE-2023-22515)

ID	Name	Product	Family	Published	Updated	Severity
114057	Atlassian Confluence 8.4.x < 8.4.3 Privilege Escalation	Web App Scanning	Component Vulnerability	10/5/2023	11/7/2023	critical
114058	Atlassian Confluence 8.5.x < 8.5.2 Privilege Escalation	Web App Scanning	Component Vulnerability	10/5/2023	11/7/2023	critical
114056	Atlassian Confluence 8.x < 8.3.3 Privilege Escalation	Web App Scanning	Component Vulnerability	10/5/2023	11/7/2023	critical
182550	Atlassian Confluence 8.x < 8.3.3 / 8.4.x < 8.4.3 / 8.5.x < 8.5.2 (CONFSERVER-92475)	Nessus	CGI abuses	10/4/2023	6/5/2024	critical
182969	Atlassian Confluence 8.x < 8.3.3 / 8.4.x < 8.4.3 / 8.5.x < 8.5.2 (CONFSERVER-92475) (Direct Check)	Nessus	CGI abuses	10/12/2023	11/12/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical