jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcryptoUpgrade custodiaUpgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade python3-yubicoUpgrade python3-qrcodeUpgrade python3-custodia | May 4, 2022 | Jan 18, 2018 |
| Alpine Linux | — | Upgrade rabbitmq-serverUpgrade ruby | Aug 22, 2024 | Jan 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ruby-libsUpgrade ruby-develUpgrade rubygem-xmlrpcUpgrade ipa-clientUpgrade rubygem-bigdecimalUpgrade rubygem-irbUpgrade ipa-commonUpgrade rubyUpgrade ipa-python-compatUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade ruby-debuginfoUpgrade ruby-docUpgrade ipa-server-trust-adUpgrade rubygem-did_you_meanUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade rubygem-bundlerUpgrade ipa-serverUpgrade rubygem-io-consoleUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade rubygem-psychUpgrade rubygem-opensslUpgrade ipa-server-dnsUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade ipa-server-commonUpgrade python2-ipalib | Oct 28, 2020 | Jan 18, 2018 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Jan 18, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 18, 2018 |
| Centos_linux | — | Upgrade ipa-client-epnUpgrade python3-jwcryptoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-healthcheck-coreUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python2-ipaserverUpgrade bind-dyndb-ldap-debugsourceUpgrade slf4jUpgrade softhsm-debugsourceUpgrade javassist-javadocUpgrade apache-commons-collectionsUpgrade xalan-j2Upgrade jackson-coreUpgrade jss-debuginfoUpgrade python3-nssUpgrade relaxngDatatypeUpgrade ipa-server-dnsUpgrade glassfish-jaxb-runtimeUpgrade ipa-debugsourceUpgrade ipa-selinuxUpgrade jssUpgrade pki-caUpgrade ipa-client-sambaUpgrade glassfish-jaxb-coreUpgrade softhsm-debuginfoUpgrade python3-pyusbUpgrade pki-core-debuginfoUpgrade jackson-annotationsUpgrade pki-servlet-4.0-apiUpgrade python3-qrcodeUpgrade python3-ipaclientUpgrade custodiaUpgrade pki-kraUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-serverUpgrade xsomUpgrade python3-kdcproxyUpgrade jss-debugsourceUpgrade ipa-server-commonUpgrade apache-commons-netUpgrade bind-dyndb-ldapUpgrade glassfish-jaxb-txw2Upgrade python-nss-debugsourceUpgrade ipa-client-commonUpgrade jackson-databindUpgrade jackson-jaxrs-json-providerUpgrade ipa-commonUpgrade ldapjdk-javadocUpgrade xml-commons-apisUpgrade glassfish-jaxb-apiUpgrade opendnssec-debugsourceUpgrade opendnssec-debuginfoUpgrade softhsmUpgrade python3-pkiUpgrade xmlstreambufferUpgrade pki-base-javaUpgrade pki-baseUpgrade velocityUpgrade pki-tools-debuginfoUpgrade ipa-server-debuginfoUpgrade stax-exUpgrade apache-commons-langUpgrade resteasyUpgrade ipa-server-trust-adUpgrade python3-qrcode-coreUpgrade python2-ipalibUpgrade softhsm-develUpgrade bea-stax-apiUpgrade ipa-client-debuginfoUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade slapi-nis-debugsourceUpgrade jss-javadocUpgrade xerces-j2Upgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade jackson-module-jaxb-annotationsUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-clientUpgrade pki-symkey-debuginfoUpgrade ipa-serverUpgrade python2-ipaclientUpgrade python3-ipalibUpgrade ldapjdkUpgrade ipa-healthcheckUpgrade javassistUpgrade pki-servlet-engineUpgrade opendnssecUpgrade tomcatjssUpgrade python3-custodiaUpgrade jakarta-commons-httpclientUpgrade xml-commons-resolverUpgrade slapi-nis-debuginfoUpgrade glassfish-fastinfosetUpgrade python3-ipaserverUpgrade slapi-nisUpgrade pki-core-debugsourceUpgrade python3-yubico | Oct 1, 2020 | Jan 18, 2018 |
| Freebsd | — | Upgrade rt44Upgrade rubyUpgrade rt42Upgrade rubygem-rdoc | Aug 29, 2019 | Aug 29, 2019 |
| Jquery | — | Upgrade jQuery to version 3.0.0 | Feb 6, 2018 | Jan 18, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.1.0.1.4.0 on Solaris 11.4 | Oct 19, 2018 | Jan 18, 2018 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0. | Oct 17, 2019 | Jan 18, 2018 |
| Oracle_linux | — | Upgrade python3-jwcryptoUpgrade velocityUpgrade ipa-client-sambaUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade pki-serverUpgrade opendnssecUpgrade python3-qrcode-coreUpgrade ipa-server-dnsUpgrade python3-pyusbUpgrade pki-kraUpgrade pki-symkeyUpgrade python3-kdcproxyUpgrade jakarta-commons-httpclientUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade python3-custodiaUpgrade softhsmUpgrade softhsm-develUpgrade jackson-annotationsUpgrade python3-nssUpgrade glassfish-jaxb-apiUpgrade python3-ipaclientUpgrade apache-commons-collectionsUpgrade jssUpgrade slf4jUpgrade pki-base-javaUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade stax-exUpgrade ipa-client-epnUpgrade python2-ipalibUpgrade glassfish-fastinfosetUpgrade python-nss-docUpgrade pki-servlet-engineUpgrade pki-toolsUpgrade bind-dyndb-ldapUpgrade ipa-python-compatUpgrade ipa-client-commonUpgrade javassistUpgrade relaxngDatatypeUpgrade ipa-clientUpgrade ipa-commonUpgrade bea-stax-apiUpgrade xml-commons-resolverUpgrade glassfish-jaxb-runtimeUpgrade python2-ipaserverUpgrade slapi-nisUpgrade ipa-selinuxUpgrade apache-commons-langUpgrade jackson-module-jaxb-annotationsUpgrade xml-commons-apisUpgrade pki-baseUpgrade python3-ipalibUpgrade resteasyUpgrade custodiaUpgrade glassfish-jaxb-txw2Upgrade python2-ipaclientUpgrade xmlstreambufferUpgrade ipa-server-commonUpgrade apache-commons-netUpgrade jss-javadocUpgrade javassist-javadocUpgrade ipa-server-trust-adUpgrade python3-yubicoUpgrade python3-pkiUpgrade jackson-jaxrs-json-providerUpgrade python3-ipaserverUpgrade xalan-j2Upgrade jackson-coreUpgrade pki-caUpgrade ipa-healthcheckUpgrade ipa-serverUpgrade tomcatjssUpgrade xerces-j2Upgrade ldapjdkUpgrade xsomUpgrade pki-servlet-4.0-apiUpgrade jackson-databind | Oct 7, 2020 | Jun 27, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Jan 18, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2015 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 18, 2018 |
| Redhat_linux | — | Upgrade ipa-selinuxUpgrade softhsmUpgrade python3-ipaserverUpgrade pki-kraUpgrade ipa-client-sambaUpgrade xsomUpgrade bind-dyndb-ldapUpgrade slf4jUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-symkey-debuginfoUpgrade pki-servlet-engineUpgrade python3-qrcodeUpgrade opendnssec-debuginfoUpgrade softhsm-develUpgrade slapi-nis-debugsourceUpgrade jakarta-commons-httpclientUpgrade bind-dyndb-ldap-debuginfoUpgrade python2-ipalibUpgrade xml-commons-apisUpgrade pki-serverUpgrade opendnssecUpgrade slf4j-jdk14Upgrade jackson-module-jaxb-annotationsUpgrade python3-jwcryptoUpgrade jssUpgrade jss-debuginfoUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade jackson-annotationsUpgrade ipa-server-dnsUpgrade stax-exUpgrade velocityUpgrade glassfish-jaxb-apiUpgrade ipa-client-epnUpgrade jss-debugsourceUpgrade python3-nss-debuginfoUpgrade ldapjdk-javadocUpgrade javassistUpgrade relaxngDatatypeUpgrade python3-ipaclientUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade softhsm-debuginfoUpgrade python-nss-debugsourceUpgrade jackson-jaxrs-providersUpgrade pki-toolsUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-client-debuginfoUpgrade python2-ipaclientUpgrade python3-kdcproxyUpgrade ipa-healthcheck-coreUpgrade python3-nssUpgrade ipa-server-debuginfoUpgrade glassfish-fastinfosetUpgrade ipa-serverUpgrade apache-commons-netUpgrade ipa-server-trust-adUpgrade bea-stax-apiUpgrade slapi-nis-debuginfoUpgrade opendnssec-debugsourceUpgrade pki-core-debuginfoUpgrade xalan-j2Upgrade pki-symkeyUpgrade pki-core-debugsourceUpgrade ipa-client-commonUpgrade python3-pkiUpgrade javassist-javadocUpgrade apache-commons-collectionsUpgrade ipa-healthcheckUpgrade python3-yubicoUpgrade pki-baseUpgrade softhsm-debugsourceUpgrade jss-javadocUpgrade jackson-databindUpgrade glassfish-jaxb-runtimeUpgrade ipa-clientUpgrade ipa-server-trust-ad-debuginfoUpgrade xmlstreambufferUpgrade xerces-j2Upgrade ldapjdkUpgrade custodiaUpgrade xml-commons-resolverUpgrade pki-caUpgrade ipa-commonUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-coreUpgrade python3-ipalibUpgrade python3-pyusbUpgrade pki-servlet-4.0-apiUpgrade ipa-debugsourceNo solution existsUpgrade resteasyUpgrade slapi-nisUpgrade pki-tools-debuginfoUpgrade glassfish-jaxb-txw2Upgrade tomcatjssUpgrade pki-base-javaUpgrade python-nss-docUpgrade jackson-coreUpgrade apache-commons-lang | Oct 1, 2020 | Jan 18, 2018 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python3-nssUpgrade python-nss-debugsource | Mar 12, 2024 | Jan 18, 2018 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade ruby2.5-develUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5 | Mar 21, 2020 | Jan 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub