CVE-2017-9510: Atlassian Fisheye

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

The repository changelog resource in Atlassian Fisheye before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the start date and end date parameters.

Affected products

• Atlassian Fisheye: up to and including 4.4.0

Published 2017-08-24. Last modified 2026-06-17.