Known vulnerabilities in Atlassian Fisheye

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:atlassian_fisheye:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Atlassian Fisheye Atlassian Fisheye is affected by 19 known vulnerabilities: 2 high, 5 medium, 12 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117197 - Improper input validation
CVE-2025-59250
CWE-20 High
No
No
4.9.5 15.10.2025 SB2025101554
SB2025121145
SB2025122942
and 6 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988
CWE-611 Medium
Available
No
4.9.6 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU65892 - Insufficient Verification of Data Authenticity
CVE-2022-26137
CWE-345 Medium
No
No
4.8.10 29.07.2022 SB2022072917
#VU65891 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-26136
CWE-79 Low
No
No
4.8.10 29.07.2022 SB2022072917
#VU28495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4013
CWE-79 Low
No
No
4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28494 - Improper Authorization
CVE-2020-4014
CWE-285 Low
No
No
4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28493 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4015
CWE-200 Medium
No
No
4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28492 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4016
CWE-200 Medium
No
No
4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28491 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4017
CWE-200 Medium
No
No
4.8.1, 4.9.0 01.06.2020 SB2020060112
#VU28490 - Cross-Site Request Forgery (CSRF)
CVE-2020-4018
CWE-352 Low
No
No
4.8.1 01.06.2020 SB2020060112
#VU28489 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4023
CWE-79 Low
No
No
4.8.2, 4.9.0 01.06.2020 SB2020060111
#VU15808 - Permissions, Privileges, and Access Controls
CVE-2018-13399
CWE-264 Low
No
No
4.6.1, 4.7.0 12.11.2018 SB2018111206
#VU15366 - Cross-Site Request Forgery (CSRF)
CVE-2018-13398
CWE-352 Low
No
No
4.5.4, 4.6.0 15.10.2018 SB2018101506
#VU14027 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-13388
CWE-79 Low
No
No
4.5.3 23.07.2018 SB2018072703
#VU14028 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-16859
CWE-22 Low
No
No
4.3.2, 4.4.3, 4.5.0 10.07.2018 SB2018072703
#VU12615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5228
CWE-79 Low
No
No
- 14.05.2018 SB2018030809
#VU12441 - Improper input validation
CVE-2018-5223
CWE-20 High
No
No
- 07.05.2018 SB2018030809
#VU10666 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18091
CWE-79 Low
No
No
- 21.02.2018 SB2018022104
#VU10665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18093
CWE-79 Low
No
No
- 21.02.2018 SB2018022104