7.6.9

DATE	CVE	VULNERABILITY TITLE	RISK
2019-02-13	CVE-2018-13403	Cross-site Scripting vulnerability in Atlassian Jira The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.12.4, and from version 7.13.0 before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a saved filter when displayed on a Jira dashboard. network low complexity atlassian CWE-79	5.4
2018-04-10	CVE-2017-18100	Cross-site Scripting vulnerability in Atlassian Jira The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of quick filters. network low complexity atlassian CWE-79	6.1