Lucene search

[email protected]CVE-2011-4822

HistoryDec 15, 2011 - 3:57 a.m.

CVE-2011-4822

2011-12-1503:57:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-4822

xss

atlassian

fisheye

security vulnerabilities

web script

html

remote attackers

profile feature

4.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the user profile feature in Atlassian FishEye before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via (1) snippets in a user comment, which is not properly handled in a Confluence page, or (2) the user profile display name, which is not properly handled in a FishEye page.

CPENameOperatorVersion
atlassian:fisheyeatlassian fisheyeeq2.4.6
atlassian:fisheyeatlassian fisheyeeq2.0
atlassian:fisheyeatlassian fisheyeeq2.5.1
atlassian:fisheyeatlassian fisheyeeq2.1.2
atlassian:fisheyeatlassian fisheyeeq2.3.5
atlassian:fisheyeatlassian fisheyeeq2.0.1
atlassian:fisheyeatlassian fisheyeeq2.1.0
atlassian:fisheyeatlassian fisheyeeq2.4.4
atlassian:fisheyeatlassian fisheyeeq2.5.4
atlassian:fisheyeatlassian fisheyeeq2.3.7

CPE	Name	Operator	Version
atlassian:fisheye	atlassian fisheye	eq	2.4.6
atlassian:fisheye	atlassian fisheye	eq	2.0
atlassian:fisheye	atlassian fisheye	eq	2.5.1
atlassian:fisheye	atlassian fisheye	eq	2.1.2
atlassian:fisheye	atlassian fisheye	eq	2.3.5
atlassian:fisheye	atlassian fisheye	eq	2.0.1
atlassian:fisheye	atlassian fisheye	eq	2.1.0
atlassian:fisheye	atlassian fisheye	eq	2.4.4
atlassian:fisheye	atlassian fisheye	eq	2.5.4
atlassian:fisheye	atlassian fisheye	eq	2.3.7

Rows per page:

1-10 of 531

References

confluence.atlassian.com/display/FISHEYE/FishEye+and+Crucible+Security+Advisory+2011-11-22

osvdb.org/77263

osvdb.org/77264

secunia.com/advisories/46975

www.securityfocus.com/bid/50762

exchange.xforce.ibmcloud.com/vulnerabilities/71426

exchange.xforce.ibmcloud.com/vulnerabilities/71427

jira.atlassian.com/browse/FE-3797

jira.atlassian.com/browse/FE-3798

4.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.7%

JSON

Related for CVE-2011-4822

prion1 cvelist1 ibm5