AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-18094

MEDIUM · CVSS 4.8 EPSS 0.62%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-03-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2017-18094
Severity
MEDIUM
CVSS
4.8
EPSS
0.62%
Java

Original NVD Description

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allow remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the base path setting of a configured file system repository.