Highly Severe Oracle WebLogic Server OS Command Injection Flaw Actively Exploited
June 4, 2024High-Severity Atlassian Confluence Vulnerability Allows Attackers to Execute Code
June 4, 2024Highly Severe Oracle WebLogic Server OS Command Injection Flaw Actively Exploited
June 4, 2024High-Severity Atlassian Confluence Vulnerability Allows Attackers to Execute Code
June 4, 2024Severity
High
Analysis Summary
CVE-2024-21683
Atlassian Confluence Data Center and Server could allow a remote authenticated attacker to execute arbitrary code on the system. An attacker could exploit this vulnerability to cause high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.
Impact
- Gain Access
- Code Execution
Indicators of Compromise
CVE
- CVE-2024-21683
Affected Vendors
Affected Products
- Atlassian Confluence Server 8.0.0
- Atlassian Confluence Data Center 8.0.0
- Atlassian Confluence Data Center 8.1.0
- Atlassian Confluence Data Center 8.2.0
- Atlassian Confluence Server 8.4.0
- Atlassian Confluence Server 8.3.0
- Atlassian Confluence Server 8.2.0
- Atlassian Confluence Server 8.1.0
- Atlassian Confluence Server 8.5.0
- Atlassian Confluence Data Center 8.5.0
- Atlassian Confluence Data Center 8.4.0
- Atlassian Confluence Data Center 8.3.0
Remediation
Refer to Atlassian Security Advisory for patch, upgrade or suggested workaround information.