Confluence and Java Vulnerability Question.

nwolg

Hello.

Sorry, please let me know if you know.
Is Confluence Server 7.13.6 affected by CVE-2022-21476 and CVE-2022-21449 Java vulnerabilities?

Fabio Racobaldo _Catworkx_

Hi @nwolg ,

all security vulnerabilities, impacts and workarounds can be managed using the following link https://www.atlassian.com/trust/security/advisories

These two vulnerabilities are related to JAVA, so please verify the java version used by your application and, based on the supported platforms, https://confluence.atlassian.com/doc/supported-platforms-207488198.html, change JVM.

Hope this helps,

Fabio