Login Request a demo
FA
Product
Fisheye and Crucible
by Atlassian · last CVE Feb 20, 2019
3
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fisheye and Crucible to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-13392
6.1
2%
Aug 13
Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS)…
Affected: before 4.6.0
CVE-2018-20241
5.4
1%
Feb 20
The Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site…
Affected: before 4.7.0
CVE-2018-20240
4.8
1%
Feb 20
The administrative linker functionality in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site…
Affected: before 4.7.0
Showing 3