jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-kdcproxyUpgrade python3-custodiaUpgrade python3-yubicoUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade python3-pyusbUpgrade custodiaUpgrade python3-qrcode-core | May 4, 2022 | Jan 18, 2018 |
| Alpine Linux | — | Upgrade rabbitmq-serverUpgrade ruby | Aug 22, 2024 | Jan 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade ipa-python-compatUpgrade ipa-server-trust-adUpgrade rubygem-irbUpgrade python2-ipaclientUpgrade rubygem-test-unitUpgrade ipa-clientUpgrade rubygem-bigdecimalUpgrade rubygem-opensslUpgrade ruby-libsUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade python2-ipaserverUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-xmlrpcUpgrade rubygem-jsonUpgrade rubyUpgrade ipa-client-commonUpgrade ipa-commonUpgrade ruby-docUpgrade ipa-serverUpgrade python2-ipalibUpgrade ipa-server-dnsUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygemsUpgrade ipa-server-commonUpgrade rubygems-develUpgrade rubygem-net-telnetUpgrade rubygem-power_assert | Oct 28, 2020 | Jan 18, 2018 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Jan 18, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 18, 2018 |
| Centos_linux | — | Upgrade opendnssec-debugsourceUpgrade opendnssec-debuginfoUpgrade ipa-serverUpgrade ipa-python-compatUpgrade ipa-commonUpgrade ldapjdkUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipaserverUpgrade slf4j-jdk14Upgrade jackson-databindUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade stax-exUpgrade xerces-j2Upgrade ipa-debuginfoUpgrade xmlstreambufferUpgrade pki-tools-debuginfoUpgrade jackson-module-jaxb-annotationsUpgrade slapi-nis-debugsourceUpgrade python3-qrcode-coreUpgrade apache-commons-langUpgrade pki-baseUpgrade jss-javadocUpgrade velocityUpgrade pki-base-javaUpgrade xml-commons-apisUpgrade resteasyUpgrade pki-core-debugsourceUpgrade softhsm-develUpgrade opendnssecUpgrade ipa-server-debuginfoUpgrade ipa-client-commonUpgrade pki-symkey-debuginfoUpgrade ipa-clientUpgrade jackson-jaxrs-providersUpgrade slapi-nis-debuginfoUpgrade python2-ipaclientUpgrade tomcatjssUpgrade softhsmUpgrade python3-pkiUpgrade python3-ipalibUpgrade jakarta-commons-httpclientUpgrade bea-stax-apiUpgrade ipa-server-trust-adUpgrade jackson-jaxrs-json-providerUpgrade ipa-client-debuginfoUpgrade javassistUpgrade xml-commons-resolverUpgrade python3-yubicoUpgrade pki-servlet-engineUpgrade python3-custodiaUpgrade ldapjdk-javadocUpgrade slapi-nisUpgrade python2-ipalibUpgrade ipa-healthcheckUpgrade python-nss-debugsourceUpgrade glassfish-jaxb-txw2Upgrade pki-core-debuginfoUpgrade apache-commons-collectionsUpgrade python3-ipaclientUpgrade python3-nss-debuginfoUpgrade ipa-debugsourceUpgrade python-nss-docUpgrade ipa-client-epnUpgrade ipa-server-commonUpgrade ipa-client-sambaUpgrade custodiaUpgrade pki-serverUpgrade slf4jUpgrade bind-dyndb-ldapUpgrade pki-symkeyUpgrade bind-dyndb-ldap-debugsourceUpgrade softhsm-debuginfoUpgrade python3-nssUpgrade xsomUpgrade relaxngDatatypeUpgrade python3-kdcproxyUpgrade jackson-coreUpgrade xalan-j2Upgrade glassfish-jaxb-coreUpgrade jss-debugsourceUpgrade apache-commons-netUpgrade pki-kraUpgrade python3-pyusbUpgrade ipa-selinuxUpgrade pki-toolsUpgrade ipa-server-trust-ad-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade ipa-server-dnsUpgrade pki-servlet-4.0-apiUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade jss-debuginfoUpgrade softhsm-debugsourceUpgrade jackson-annotationsUpgrade python2-ipaserverUpgrade pki-caUpgrade jssUpgrade python3-jwcryptoUpgrade javassist-javadoc | Oct 1, 2020 | Jan 18, 2018 |
| Freebsd | — | Upgrade rt42Upgrade rubygem-rdocUpgrade rubyUpgrade rt44 | Aug 29, 2019 | Aug 29, 2019 |
| Jquery | — | Upgrade jQuery to version 3.0.0 | Feb 6, 2018 | Jan 18, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.1.0.1.4.0 on Solaris 11.4 | Oct 19, 2018 | Jan 18, 2018 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0. | Oct 17, 2019 | Jan 18, 2018 |
| Oracle_linux | — | Upgrade velocityUpgrade jssUpgrade javassistUpgrade pki-base-javaUpgrade ipa-server-dnsUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade python3-kdcproxyUpgrade ipa-client-epnUpgrade bind-dyndb-ldapUpgrade relaxngDatatypeUpgrade python3-qrcodeUpgrade pki-toolsUpgrade ipa-client-sambaUpgrade ipa-python-compatUpgrade python3-jwcryptoUpgrade ipa-healthcheck-coreUpgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade softhsmUpgrade jackson-jaxrs-providersUpgrade slf4j-jdk14Upgrade pki-kraUpgrade glassfish-jaxb-coreUpgrade python3-nssUpgrade jakarta-commons-httpclientUpgrade python3-ipaclientUpgrade glassfish-jaxb-apiUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade pki-servlet-engineUpgrade apache-commons-collectionsUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade jackson-annotationsUpgrade opendnssecUpgrade softhsm-develUpgrade python-nss-docUpgrade pki-symkeyUpgrade stax-exUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-resolverUpgrade ipa-healthcheckUpgrade pki-caUpgrade pki-baseUpgrade ipa-clientUpgrade javassist-javadocUpgrade python2-ipaserverUpgrade ldapjdkUpgrade jackson-databindUpgrade bea-stax-apiUpgrade ipa-commonUpgrade xml-commons-apisUpgrade xalan-j2Upgrade xsomUpgrade jackson-jaxrs-json-providerUpgrade jackson-coreUpgrade tomcatjssUpgrade python3-ipaserverUpgrade apache-commons-langUpgrade ipa-selinuxUpgrade python2-ipaclientUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade python3-yubicoUpgrade ipa-server-commonUpgrade jackson-module-jaxb-annotationsUpgrade python3-pkiUpgrade jss-javadocUpgrade ipa-server-trust-adUpgrade slapi-nisUpgrade apache-commons-netUpgrade xerces-j2Upgrade python3-ipalibUpgrade resteasyUpgrade ipa-serverUpgrade glassfish-jaxb-txw2Upgrade custodia | Oct 7, 2020 | Jun 27, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Jan 18, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2015 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 18, 2018 |
| Redhat_linux | — | Upgrade pki-symkey-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-debuginfoUpgrade python3-custodiaUpgrade slf4j-jdk14Upgrade pki-servlet-engineUpgrade python3-ipaserverUpgrade glassfish-jaxb-apiUpgrade bind-dyndb-ldap-debugsourceUpgrade javassistUpgrade python3-qrcode-coreUpgrade jss-debuginfoUpgrade python2-ipalibUpgrade slf4jUpgrade softhsmUpgrade pki-kraUpgrade jss-debugsourceUpgrade ipa-client-sambaUpgrade softhsm-debuginfoUpgrade velocityUpgrade pki-serverUpgrade xml-commons-apisUpgrade xsomUpgrade jackson-jaxrs-providersUpgrade jakarta-commons-httpclientUpgrade jackson-annotationsUpgrade ldapjdk-javadocUpgrade opendnssecUpgrade relaxngDatatypeUpgrade python3-qrcodeUpgrade python3-ipaclientUpgrade softhsm-develUpgrade bind-dyndb-ldap-debuginfoUpgrade jssUpgrade python-nss-debugsourceUpgrade stax-exUpgrade ipa-python-compatUpgrade ipa-selinuxUpgrade opendnssec-debuginfoUpgrade ipa-client-epnUpgrade pki-toolsUpgrade xml-commons-resolverUpgrade custodiaUpgrade ipa-clientNo solution existsUpgrade apache-commons-collectionsUpgrade bea-stax-apiUpgrade slapi-nisUpgrade pki-core-debugsourceUpgrade jackson-coreUpgrade pki-baseUpgrade python2-ipaclientUpgrade tomcatjssUpgrade pki-base-javaUpgrade ipa-server-commonUpgrade python2-ipaserverUpgrade jackson-databindUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-coreUpgrade ipa-client-debuginfoUpgrade python-nss-docUpgrade pki-tools-debuginfoUpgrade python3-nssUpgrade jackson-jaxrs-json-providerUpgrade xalan-j2Upgrade slapi-nis-debuginfoUpgrade pki-caUpgrade ipa-server-trust-ad-debuginfoUpgrade apache-commons-langUpgrade xmlstreambufferUpgrade python3-pyusbUpgrade glassfish-fastinfosetUpgrade python3-yubicoUpgrade pki-symkeyUpgrade javassist-javadocUpgrade apache-commons-netUpgrade pki-core-debuginfoUpgrade ipa-healthcheck-coreUpgrade pki-servlet-4.0-apiUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade ipa-healthcheckUpgrade jss-javadocUpgrade python3-kdcproxyUpgrade opendnssec-debugsourceUpgrade ipa-client-commonUpgrade softhsm-debugsourceUpgrade resteasyUpgrade xerces-j2Upgrade ipa-serverUpgrade ipa-debugsourceUpgrade glassfish-jaxb-txw2Upgrade ldapjdkUpgrade python3-ipalibUpgrade ipa-server-debuginfoUpgrade python3-pkiUpgrade python3-nss-debuginfoUpgrade python3-jwcryptoUpgrade ipa-server-dnsUpgrade slapi-nis-debugsourceUpgrade jackson-module-jaxb-annotations | Oct 1, 2020 | Jan 18, 2018 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python3-nss | Mar 12, 2024 | Jan 18, 2018 |
| Suse | — | Upgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade ruby2.5-develUpgrade ruby2.5-stdlibUpgrade ruby2.5 | Mar 21, 2020 | Jan 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub