7.1.10

DATE	CVE	VULNERABILITY TITLE	RISK
2018-01-12	CVE-2017-14594	Cross-site Scripting vulnerability in Atlassian Jira The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jqlQuery query parameter. network low complexity atlassian CWE-79	6.1
2017-01-31	CVE-2016-6285	Cross-site Scripting vulnerability in Atlassian Jira Cross-site scripting (XSS) vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header. network low complexity atlassian CWE-79	6.1