VDB
CVE-2023-22523
CVE-2023-22523
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Bitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle. Confluence ist eine kommerzielle Wiki-Software. Jira ist eine Webanwendung zur Softwareentwicklung.
EPSS 11.15% · 95.5th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
11.15%
95.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux | |
| Atlassian | Atlassian Confluence Data Center LTS <9.2.20 | |
| Atlassian | Atlassian Crucible <4.9.10 | |
| Atlassian | Atlassian Jira Data Center LTS <10.3.20 | |
| Atlassian | Atlassian Confluence < 8.6.2 | |
| Atlassian | Atlassian Jira Software Service Management < 5.4.12 | |
| Atlassian | Atlassian Confluence Server | |
| Atlassian | Atlassian Jira Software Software Server | |
| Atlassian | Atlassian Jira Software Core Server | |
| Atlassian | Atlassian Bitbucket < 8.14.2 | |
| Atlassian | Atlassian Bitbucket Server | |
| Atlassian | Atlassian Confluence < 8.5.4 | |
| Atlassian | Atlassian Jira Software Management Cloud | |
| Atlassian | Atlassian Bitbucket < 8.13.3 | |
| Atlassian | Atlassian Jira LTS <9.12.35 | |
| Atlassian | Atlassian Bamboo < 9.3.5 | |
| Atlassian | Atlassian Bamboo Data Center LTS <9.6.26 | |
| Atlassian | Atlassian Jira Software Service Management < 4.20.28 | |
| Atlassian | Atlassian Bitbucket < 8.9.7 | |
| Atlassian | Atlassian Fisheye <4.9.10 |
…and 23 more
Timeline
- Dec 5, 2023 CVE Published
- Dec 6, 2023 EPSS Score
- Jan 5, 2024 EPSS Score
- Mar 4, 2024 EPSS Score
- Apr 2, 2024 EPSS Score
- May 31, 2024 EPSS Score
- Jun 30, 2024 EPSS Score
- Jul 29, 2024 EPSS Score
- Sep 27, 2024 EPSS Score
- Oct 26, 2024 EPSS Score
- Nov 25, 2024 EPSS Score
- Jan 24, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3063.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3063 advisory
- https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html advisory
- https://confluence.atlassian.com/security/cve-2023-22522-rce-vulnerability-in-confluence-data-center-and-confluence-server-1319570362.html advisory
- https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html advisory
- https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html advisory
- https://confluence.atlassian.com/security/security-bulletin-december-12-2023-1319249520.html advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1608.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1608 advisory
- https://confluence.atlassian.com/security/security-bulletin-may-19-2026-1786839142.html advisory
- https://access.redhat.com/errata/RHSA-2026:19098 advisory
- https://access.redhat.com/errata/RHSA-2026:35992 advisory
- https://access.redhat.com/errata/RHSA-2026:35997 advisory
- https://access.redhat.com/errata/RHSA-2026:36012 advisory
- https://access.redhat.com/errata/RHSA-2026:35991 advisory
- https://access.redhat.com/errata/RHSA-2026:35990 advisory
- https://access.redhat.com/errata/RHSA-2026:35996 advisory
- https://access.redhat.com/errata/RHSA-2026:38514 advisory
- https://access.redhat.com/errata/RHSA-2026:38500 advisory
- https://access.redhat.com/errata/RHSA-2026:41928 advisory