CVE-2017-14588

CVE-2017-14588: vulnerability in Atlassian Fisheye and Crucible

Published · Updated

Follow this CVE+ Monitor Crucible+ Monitor Fisheye

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the dialog parameter.
Affected products
Atlassian · Atlassian Fisheye and Crucible
Related CVEs — Atlassian Fisheye and Crucible

In the same product, most dangerous first.

CVE-2017-9511HIGHCVE-2017-9511EPSS 3.2%CVE-2017-9512HIGHCVE-2017-9512EPSS 2.0%CVE-2017-14587—CVE-2017-14587EPSS 0.9%CVE-2017-9508—CVE-2017-9508EPSS 0.8%