Lucene search
AtlassianCVELIST:CVE-2017-18039HistoryFeb 02, 2018 - 2:00 p.m.
CVE-2017-18039
2018-02-0214:00:00
atlassian
www.cve.org
4
EPSS
0.001
Percentile
40.6%
The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter.
CNA Affected
[
{
"product": "Jira",
"vendor": "Atlassian",
"versions": [
{
"status": "affected",
"version": "from 6.2.1 prior to 7.4.4"
}
]
}
]Related
prion
prion
Cross site scripting
2018-02-02 14:29:00
Cross site scripting
2018-07-16 13:29:00
nessus
nessus
Atlassian JIRA 6.2.1 < 7.4.4 Cross-Site Scripting (XSS) Vulnerability (JRASERVER-66719)
2020-01-06 00:00:00
Atlassian Jira 7.12.x < 7.12.3 Multiple Vulnerabilities
2023-03-14 00:00:00
Atlassian Jira 7.7.x < 7.7.5 Multiple Vulnerabilities
2023-03-14 00:00:00
cve
cve
CVE-2017-18039
2018-02-02 14:29:00
CVE-2018-13387
2018-07-16 13:29:00
nvd
nvd
CVE-2017-18039
2018-02-02 14:29:00
CVE-2018-13387
2018-07-16 13:29:00
cvelist
cvelist
CVE-2018-13387
2018-07-16 13:00:00
atlassian
atlassian
XSS in IncomingMailServer resource - CVE-2018-13387
2018-06-28 03:20:46
XSS in IncomingMailServer resource - CVE-2018-13387
2018-06-28 03:20:46