CVE-2012-1500: Atlassian Greenhopper

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject arbitrary script code.

Affected products

• Atlassian Greenhopper: before 5.9.8 (fixed in 5.9.8)
• Atlassian Jira: version 4.4.3 only

Published 2020-02-13. Last modified 2026-06-16.