PT-2025-42903 · Atlassian · Confluence

Published 2025-10-21 · Updated 2025-12-09 · CVE-2025-22166

Positive Technologies (AI Summary)

CVSS v4.0

8.3

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Name of the Vulnerable Software and Affected Versions Confluence Data Center versions prior to 8.5.25 Confluence Data Center versions prior to 9.2.7 Confluence Data Center versions prior to 10.0.2

Description The software contains a High severity Denial of Service (DoS) issue. This allows an attacker to disrupt services, potentially making a resource unavailable to intended users. The issue was reported through an internal program. A DoS vulnerability can temporarily or indefinitely disrupt services of a host connected to a network.

Recommendations Upgrade Confluence Data Center to a version greater than or equal to 8.5.25. Upgrade Confluence Data Center to a version greater than or equal to 9.2.7. Upgrade Confluence Data Center to a version greater than or equal to 10.0.2.

Fix

DoS

Weakness Enumeration

CWE-405

Related Identifiers

CVE-2025-22166

Affected Products

Confluence

References · 11

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22166 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22166 · Security Note
• https://jira.atlassian.com/browse/CONFSERVER-100907 · Vendor Advisory
• https://confluence.atlassian.com/pages/viewpage.action?pageId=1652920034 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-22166 · Vendor Advisory
• https://t.me/cveNotify/144931 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1980690788087394329 · Twitter Post
• https://reddit.com/r/Action1/comments/1piftm3/december_2025_patch_tuesday_overview · Reddit Post
• https://t.me/CVEtracker/35410 · Telegram Post
• https://t.me/cveNotify/139666 · Telegram Post
• https://reddit.com/r/Action1/comments/1pifro1/december_2025_patch_tuesday_overview · Reddit Post