Summary
generated automatically from NVD dataCVE-2023-22515 affects publicly accessible Atlassian Confluence Data Center and Server instances, where an improper input validation flaw (CWE-20) lets external attackers create unauthorized Confluence administrator accounts and access the instance. Atlassian Cloud sites hosted on an atlassian.net domain are not affected. The flaw is listed in the CISA KEV catalog, with known use in ransomware campaigns, and carries a CRITICAL CVSS v3.1 score of 9.8.
NVD description
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.
⚠️ Actively exploited — CISA KEV
This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2023-10-05. It is confirmed exploited in the wild and must be patched as a priority.
Remediation deadline (US federal agencies): 2023-10-13
Used in known ransomware campaigns.
EPSS · FIRST.org
99.2%probability of exploitation in the next 30 days
Higher than 99% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 4 oct. 2023
- Updated
- 17 juin 2026
- Status
- Analyzed
- Source
- security@atlassian.com
Affected products
Weaknesses (CWE)
References (9)
- http://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
- https://jira.atlassian.com/browse/CONFSERVER-92475Issue TrackingVendor Advisory
- http://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
- https://jira.atlassian.com/browse/CONFSERVER-92475Issue TrackingVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-22515US Government Resource
Similar CVEs
Other vulnerabilities of type CWE-20
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.