What’s Vulnerable › Vulnerabilities

CVE-2017-14588

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-11 · updated 2026-06-17
• Weakness: CWE-79

Description

Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the dialog parameter.

Affected products

• Atlassian Crucible: through 4.4.1
• Atlassian Fisheye: through 4.4.1

References

• http://www.securityfocus.com/bid/101268
• https://jira.atlassian.com/browse/CRUC-8113
• https://jira.atlassian.com/browse/FE-6935
• http://www.securityfocus.com/bid/101268
• https://jira.atlassian.com/browse/CRUC-8113
• https://jira.atlassian.com/browse/FE-6935

Get alerted when CVE-2017-14588 or the next vulnerability affects your stack