Jira@3.6.2 156 Security Vulnerabilities and Issues — Jira@3.6.2 156 CVE List

Lucene search

AtlassianJira3.6.2 156

2 matches found

CVE•added 2006/07/03 6:5 p.m.•39 views

CVE-2006-3339

secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.

5CVSS6.6AI score0.00437EPSS

CVE•added 2006/07/03 6:5 p.m.•36 views

CVE-2006-3338

Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a direct request to secure/ConfigureReleaseNote.jspa, which are not sanitized before being returned in an error page.

2.6CVSS5.9AI score0.00477EPSS