{"api_version":"1","generated_at":"2026-07-23T22:43:27+00:00","cve":"CVE-2023-36662","urls":{"html":"https://cve.report/CVE-2023-36662","api":"https://cve.report/api/cve/CVE-2023-36662.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-36662","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-36662"},"summary":{"title":"CVE-2023-36662","description":"The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2023-06-26 01:15:00","updated_at":"2023-07-06 17:54:00"},"problem_types":["CWE-79"],"metrics":[],"references":[{"url":"https://techtime.co.nz/display/TECHTIME/Security+Vulnerability+Affecting+User+Management","name":"https://techtime.co.nz/display/TECHTIME/Security+Vulnerability+Affecting+User+Management","refsource":"MISC","tags":[],"title":"Atlassian Partner, Wellington - Security Vulnerability Affecting User Management","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-36662","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36662","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"36662","vulnerable":"1","versionEndIncluding":"2.15.24","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"techtime","cpe5":"user_management","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"bitbucket","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"36662","vulnerable":"1","versionEndIncluding":"2.15.24","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"techtime","cpe5":"user_management","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"confluence","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"36662","vulnerable":"1","versionEndIncluding":"2.17.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"techtime","cpe5":"user_management","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"jira","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2023-36662","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"refsource":"MISC","name":"https://techtime.co.nz/display/TECHTIME/Security+Vulnerability+Affecting+User+Management","url":"https://techtime.co.nz/display/TECHTIME/Security+Vulnerability+Affecting+User+Management"}]}},"nvd":{"publishedDate":"2023-06-26 01:15:00","lastModifiedDate":"2023-07-06 17:54:00","problem_types":["CWE-79"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.3,"impactScore":2.7}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:techtime:user_management:*:*:*:*:*:bitbucket:*:*","versionStartIncluding":"2.2.2","versionEndIncluding":"2.15.24","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:techtime:user_management:*:*:*:*:*:confluence:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.15.24","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:techtime:user_management:*:*:*:*:*:jira:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.17.1","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}