7.12.3

DATE	CVE	VULNERABILITY TITLE	RISK
2022-04-05	CVE-2021-39114	Code Injection vulnerability in Atlassian Confluence Data Center and Confluence Server Affected versions of Atlassian Confluence Server and Data Center allow users with a valid account on a Confluence Data Center instance to execute arbitrary Java code or run arbitrary system commands by injecting an OGNL payload. network low complexity atlassian CWE-94	8.8
2021-08-30	CVE-2021-26084	Expression Language Injection vulnerability in Atlassian Confluence Data Center and Confluence Server In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. network low complexity atlassian CWE-917 critical	9.8