What does upgrading Atlassian Confluence 8.4.5 to 8.5.25 fix?

Upgrading Atlassian Confluence from 8.4.5 to 8.5.25 clears 8 known vulnerabilities (1 critical, 6 high), including 1 under active exploitation (CISA KEV). No tracked issues remain in 8.5.25.

← Atlassian Confluence

Atlassian Confluence: 8.4.5 → 8.5.25

Atlassian · upgrade impact · Official site ↗

From8.4.58 known issues To8.5.250 known issues

Fixed by upgrading to 8.5.25 iVulnerabilities that affect 8.4.5 but no longer affect 8.5.25 — the security gain from this upgrade, by exploited status then exploitation probability.

Exploited first, then by exploitation probability (EPSS).

CVE-2023-22527 CRITICAL ● exploited ⚠ ransomware EPSS 94% ✓ cleared in 8.5.25 CVE-2024-21683 HIGH EPSS 94% ✓ cleared in 8.5.25 CVE-2023-22512 HIGH EPSS 15% ✓ cleared in 8.5.25 CVE-2024-21686 HIGH EPSS 3% ✓ cleared in 8.5.25 CVE-2024-21677 HIGH EPSS 2% ✓ cleared in 8.5.25 CVE-2024-21678 HIGH EPSS 2% ✓ cleared in 8.5.25 CVE-2024-21690 HIGH EPSS 1% ✓ cleared in 8.5.25 CVE-2024-21703 MEDIUM EPSS 0% ✓ cleared in 8.5.25