Lucene search
+L

CVE-2012-1500

🗓️ 13 Feb 2020 16:02:55Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 74 Views🌐 WEB

Stored XSS vulnerability in JIRA 4.4.3 and GreenHopper before 5.9.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt
JIRA 4.4.3, GreenHopper < 5.9.8 Multiple Vulnerabilities
4 Sep 201200:00
zdt
circl
Circl
CVE-2012-1500
13 Feb 202020:49
circl
cvelist
Cvelist
CVE-2012-1500
13 Feb 202016:02
cvelist
exploitdb
Exploit DB
jira 4.4.3 / greenhopper < 5.9.8 - Multiple Vulnerabilities
4 Sep 201200:00
exploitdb
euvd
EUVD
EUVD-2012-1518
7 Oct 202500:30
euvd
exploitpack
exploitpack
jira 4.4.3 greenhopper 5.9.8 - Multiple Vulnerabilities
4 Sep 201200:00
exploitpack
nvd
NVD
CVE-2012-1500
13 Feb 202017:15
nvd
prion
Prion
Cross site scripting
13 Feb 202017:15
prion
redhatcve
RedhatCVE
CVE-2012-1500
22 May 202503:58
redhatcve
seebug
seebug.org
jira 4.4.3, greenhopper < 5.9.8 - Multiple Vulnerabilities
1 Jul 201400:00
seebug
NVD
Node
OR
ParameterPositionPathDescriptionCWE
fieldValuerequest bodysecure/UpdateFieldJson.jspaStored XSS via UpdateFieldJson.jspa allowing injection of script payloadCWE-79
idquery paramsecure/EditField.jspaURL reflecting injected data used in XSS PoC for EditField.jspaCWE-79
stepIdquery paramsecure/EditField.jspaURL reflecting injected data used in XSS PoC for EditField.jspaCWE-79
fieldIdquery paramsecure/EditField.jspaURL reflecting injected data used in XSS PoC for EditField.jspaCWE-79
decoratorquery paramsecure/EditField.jspaURL reflecting injected data used in XSS PoC for EditField.jspaCWE-79
selectedProjectidquery paramsecure/EditField.jspaURL reflecting injected data used in XSS PoC for EditField.jspaCWE-79
pageTypequery paramsecure/EditField.jspaURL reflecting injected data used in XSS PoC for EditField.jspaCWE-79
subTypequery paramsecure/EditField.jspaURL reflecting injected data used in XSS PoC for EditField.jspaCWE-79
typequery paramsecure/EditField.jspaURL reflecting injected data used in XSS PoC for EditField.jspaCWE-79
selectedBoardIdquery paramsecure/EditField.jspaURL reflecting injected data used in XSS PoC for EditField.jspaCWE-79
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:39Current
5.2Medium risk
Vulners AI Score5.2
CVSS 23.5
CVSS 3.15.4
EPSS0.01122
74