cveboard RSS feed

CVE-2024-21686

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server. This Stored XSS vulnerability, with a CVSS Score of 7.3, allows an authenticated attacker to execute arbitrary HTML or JavaScript code on a victims browser which has high impact to confidentiality, high impact to integrity, no impact to availability, and requires user interaction. Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions listed on this CVE See the release notes (https://confluence.atlassian.com/doc/confluence-release-notes-327.html). You can download the latest version of Confluence Data Center and Server from the download center (https://www.atlassian.com/software/confluence/download-archives). This vulnerability was reported via our Bug Bounty program.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Confluence Data Center

Vendor
Atlassian
Product
Confluence Data Center
Platforms
Unknown
Default status
Unknown
Confluence Data Center · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8.9.0affectedUnavailableUnavailableUnavailableNone listed
8.8.0 to 8.8.1affectedUnavailableUnavailableUnavailableNone listed
8.7.1 to 8.7.2affectedUnavailableUnavailableUnavailableNone listed
8.6.0 to 8.6.2affectedUnavailableUnavailableUnavailableNone listed
8.5.0 to 8.5.8affectedUnavailableUnavailableUnavailableNone listed
8.4.0 to 8.4.5affectedUnavailableUnavailableUnavailableNone listed
8.3.0 to 8.3.4affectedUnavailableUnavailableUnavailableNone listed
8.2.0 to 8.2.3affectedUnavailableUnavailableUnavailableNone listed
8.1.0 to 8.1.4affectedUnavailableUnavailableUnavailableNone listed
8.0.0 to 8.0.4affectedUnavailableUnavailableUnavailableNone listed
7.20.0 to 7.20.3affectedUnavailableUnavailableUnavailableNone listed
7.19.0 to 7.19.21affectedUnavailableUnavailableUnavailableNone listed
8.9.1 to 8.9.4unaffectedUnavailableUnavailableUnavailableNone listed
8.5.9 to 8.5.12unaffectedUnavailableUnavailableUnavailableNone listed
7.19.22 to 7.19.25unaffectedUnavailableUnavailableUnavailableNone listed

Confluence Server

Vendor
Atlassian
Product
Confluence Server
Platforms
Unknown
Default status
Unknown
Confluence Server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8.5.0 to 8.5.8affectedUnavailableUnavailableUnavailableNone listed
8.4.0 to 8.4.5affectedUnavailableUnavailableUnavailableNone listed
8.3.0 to 8.3.4affectedUnavailableUnavailableUnavailableNone listed
8.2.0 to 8.2.3affectedUnavailableUnavailableUnavailableNone listed
8.1.0 to 8.1.4affectedUnavailableUnavailableUnavailableNone listed
8.0.0 to 8.0.4affectedUnavailableUnavailableUnavailableNone listed
7.20.0 to 7.20.3affectedUnavailableUnavailableUnavailableNone listed
7.19.0 to 7.19.21affectedUnavailableUnavailableUnavailableNone listed
8.5.9 to 8.5.12unaffectedUnavailableUnavailableUnavailableNone listed
7.19.22 to 7.19.25unaffectedUnavailableUnavailableUnavailableNone listed