CVE-2017-16864

—

CVSS 3.0

6.1 medium

EPSS

1%p65

Published

Jan 12, 2018 (Jan 12, 2018)

Modified

Jun 17, 2026

Description

The issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the orderby parameter.

Vendors: atlassian
Products: jira
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.