VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 15, 2022· Updated Jun 17, 2026

CVE-2021-43940

CVE-2021-43940

Description

Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the local system via a DLL Hijacking vulnerability in the Confluence installer. This vulnerability only affects installations of Confluence Server and Data Center on Windows. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Atlassian/Confluence Data Center3 versions
    cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*range: <7.4.10
    • (no CPE)range: <7.4.10, >=7.5.0, <7.12.3
    • (no CPE)range: unspecified
  • Atlassian/Confluence3 versions
    cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*range: <7.4.10
    • (no CPE)range: <7.4.10, >=7.5.0, <7.12.3
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.