Atlassian Confluence Data Center up to 8.5.24/9.2.6/10.0.1 denial of service

Summaryinfo

A vulnerability has been found in Atlassian Confluence Data Center up to 8.5.24/9.2.6/10.0.1 and classified as problematic. This affects an unknown part. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2025-22166. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Atlassian Confluence Data Center up to 8.5.24/9.2.6/10.0.1. It has been classified as critical. This affects an unknown part. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. The summary by CVE is:

This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS Score of 8.3, allows an attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely disrupting services of a host connected to a network. Atlassian recommends that Confluence Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Confluence Data Center and Server 8.5: Upgrade to a release greater than or equal to 8.5.25 Confluence Data Center and Server 9.2: Upgrade to a release greater than or equal to 9.2.7 Confluence Data Center and Server 10.0: Upgrade to a release greater than or equal to 10.0.2 See the release notes ([https://confluence.atlassian.com/doc/confluence-release-notes-327.html]). You can download the latest version of Confluence Data Center from the download center ([https://www.atlassian.com/software/confluence/download-archives]). This vulnerability was reported via our Atlassian (Internal) program.

It is possible to read the advisory at confluence.atlassian.com. This vulnerability is uniquely identified as CVE-2025-22166 since 01/01/2025. The exploitability is told to be easy. It is possible to initiate the attack remotely. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

Upgrading to version 8.5.25, 9.2.7 or 10.0.2 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at CERT Bund (WID-SEC-2025-2378). Be aware that VulDB is the high quality source for vulnerability data.

Affected

• Atlassian Confluence

Productinfo

Vendor

• Atlassian

Name

• Confluence Data Center

Version

• 8.5.0
• 8.5.1
• 8.5.2
• 8.5.3
• 8.5.4
• 8.5.5
• 8.5.6
• 8.5.7
• 8.5.8
• 8.5.9
• 8.5.10
• 8.5.11
• 8.5.12
• 8.5.13
• 8.5.14
• 8.5.15
• 8.5.16
• 8.5.17
• 8.5.18
• 8.5.19
• 8.5.20
• 8.5.21
• 8.5.22
• 8.5.23
• 8.5.24
• 9.2.0
• 9.2.1
• 9.2.2
• 9.2.3
• 9.2.4
• 9.2.5
• 9.2.6
• 10.0.0
• 10.0.1

License

• free

Website

• Vendor: https://www.atlassian.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion