CVE-2017-14588

2017-10-1000:00:00

atlassian

www.cve.org

0.002 Low

EPSS

Percentile

54.8%

JSON

Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the dialog parameter.

CNA Affected

[
  {
    "product": "Atlassian Fisheye and Crucible",
    "vendor": "Atlassian",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 4.4.2"
      }
    ]
  }
]

References

www.securityfocus.com/bid/101268

jira.atlassian.com/browse/CRUC-8113

jira.atlassian.com/browse/FE-6935

0.002 Low

EPSS

Percentile

54.8%

JSON

Related for CVELIST:CVE-2017-14588