CVE-2019-14996

CVE-2019-14996: vulnerability in Atlassian Jira

Published · Updated

Follow this CVE+ Monitor Jira

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwnerUserName parameter.
Affected products
Atlassian · Jira
Related CVEs — Atlassian Jira

In the same product, most dangerous first.

CVE-2019-8451—CVE-2019-8451EPSS 94.5%CVE-2019-8449—CVE-2019-8449EPSS 85.7%CVE-2019-8442—CVE-2019-8442EPSS 59.8%CVE-2019-3403—CVE-2019-3403EPSS 53.6%CVE-2018-20824—CVE-2018-20824EPSS 38.0%CVE-2018-5230—CVE-2018-5230EPSS 37.0%