Lucene search
AtlassianCVELIST:CVE-2017-18085HistoryFeb 02, 2018 - 2:00 p.m.
CVE-2017-18085
2018-02-0214:00:00
atlassian
www.cve.org
7
EPSS
0.001
Percentile
40.6%
The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the key parameter.
CNA Affected
[
{
"product": "Confluence",
"vendor": "Atlassian",
"versions": [
{
"status": "affected",
"version": "prior to 6.6.1"
}
]
}
]Related
prion
prion
Cross site scripting
2018-02-02 14:29:00
atlassian
atlassian
nessus
nessus
nvd
nvd
CVE-2017-18085
2018-02-02 14:29:01
cve
cve
CVE-2017-18085
2018-02-02 14:29:01