{"metadata": {"vulnerability": "CVE-2022-26314", "count": 25, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 17}}, "data": [{"timestamp": "2022-02-28T00:00:00Z", "date_only": false, "value": "2022-02-28T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-26314", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-069-04", "record": "ICSA-22-069-04", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-134279", "record": "SSA-134279", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-069-04", "record": "ICSA-22-069-04", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-134279", "record": "SSA-134279", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-216", "record": "CERTFR-2022-AVI-216", "field": "revisions.0.revision_date"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-134279", "record": "SSA-134279", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-03-08T11:31:36Z", "date_only": false, "value": "2022-03-08T11:31:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-26314", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-03-08T11:31:36Z", "date_only": false, "value": "2022-03-08T11:31:36.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "CVE-2022-26314", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-03-08T12:15:00Z", "date_only": false, "value": "2022-03-08T12:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V94F-H6HR-HFQH", "record": "GHSA-V94F-H6HR-HFQH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-03-08T12:15:00Z", "date_only": false, "value": "2022-03-08T12:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-26314", "record": "GSD-2022-26314", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-03-08T12:15:11.823Z", "date_only": false, "value": "2022-03-08T12:15:11.823", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26314", "record": "FKIE_CVE-2022-26314", "field": "published"}, {"timestamp": "2022-03-09T00:00:00Z", "date_only": true, "value": "2022-03-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-17795", "record": "CNVD-2022-17795", "field": "openTime"}, {"timestamp": "2022-03-09T00:00:00Z", "date_only": true, "value": "2022-03-09", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-17795", "record": "CNVD-2022-17795", "field": "submitTime"}, {"timestamp": "2022-03-09T00:00:44Z", "date_only": false, "value": "2022-03-09T00:00:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V94F-H6HR-HFQH", "record": "GHSA-V94F-H6HR-HFQH", "field": "published"}, {"timestamp": "2022-03-11T19:04:00Z", "date_only": false, "value": "2022-03-11T19:04Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-26314", "record": "GSD-2022-26314", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-03-17T00:02:45Z", "date_only": false, "value": "2022-03-17T00:02:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V94F-H6HR-HFQH", "record": "GHSA-V94F-H6HR-HFQH", "field": "modified"}, {"timestamp": "2022-06-04T05:59:39Z", "date_only": false, "value": "2022-06-04T05:59:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/129", "record": "CVE-2022-26314", "field": "creation_timestamp", "uuid": "2f753547-7e2e-4804-90a7-dfd90d8b56d0", "content": "Active Exploitation of Confluence CVE-2022-26134 \n\n\ud83d\udc64 by Rapid7\n\nOn June 2, 2022, Atlassian published a\u00a0security advisory\u00a0for CVE-2022-26134, a critical unauthenticated remote code execution vulnerability in Confluence Server and Confluence Data Center. The vulnerability was unpatched when it was published on June 2. As of June 3, both patches and a temporary workaround are available.\nCVE-2022-26314 is an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server (typically the confluence user on Linux installations). Given the nature of the vulnerability, internet-facing Confluence servers are at very high risk.\n\n\ud83d\udcdd Contents:\n\u2022 Technical analysis\n\u2022\u2022 The vulnerability\n\u2022\u2022 Root cause\n\u2022\u2022 The patch\n\u2022\u2022 Payloads\n\u2022 Mitigation guidance\n\nhttps://www.rapid7.com/ja/blog/post/2022/06/02/active-exploitation-of-confluence-cve-2022-26134/", "url": "https://t.me/ptswarm/129"}, {"timestamp": "2022-06-25T14:45:42Z", "date_only": false, "value": "2022-06-25T14:45:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/zero_day_uz/167", "record": "CVE-2022-26314", "field": "creation_timestamp", "uuid": "68cc8725-3354-433c-9b09-ef35898cfaf5", "content": "Active Exploitation of Confluence CVE-2022-26134 \n\n\ud83d\udc64 by Rapid7\n\nOn June 2, 2022, Atlassian published a\u00a0security advisory\u00a0for CVE-2022-26134, a critical unauthenticated remote code execution vulnerability in Confluence Server and Confluence Data Center. The vulnerability was unpatched when it was published on June 2. As of June 3, both patches and a temporary workaround are available.\nCVE-2022-26314 is an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server (typically the confluence user on Linux installations). Given the nature of the vulnerability, internet-facing Confluence servers are at very high risk.\n\n\ud83d\udcdd Contents:\n\u2022 Technical analysis\n\u2022\u2022 The vulnerability\n\u2022\u2022 Root cause\n\u2022\u2022 The patch\n\u2022\u2022 Payloads\n\u2022 Mitigation guidance\n\nhttps://www.rapid7.com/ja/blog/post/2022/06/02/active-exploitation-of-confluence-cve-2022-26134/", "url": "https://t.me/zero_day_uz/167"}, {"timestamp": "2023-12-13T01:19:39.399Z", "date_only": false, "value": "2023-12-13T01:19:39.399919Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-26314", "record": "GSD-2022-26314", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T05:03:32.350Z", "date_only": false, "value": "2024-08-03T05:03:32.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-26314", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T05:03:32.350Z", "date_only": false, "value": "2024-08-03T05:03:32.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-26314", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-069-04", "record": "ICSA-22-069-04", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-069-04", "record": "ICSA-22-069-04", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T04:34:57.793Z", "date_only": false, "value": "2026-06-17T04:34:57.793", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26314", "record": "FKIE_CVE-2022-26314", "field": "lastModified"}]}
