The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade apache-commons-langUpgrade javassistUpgrade javassist-javadocUpgrade slf4jUpgrade xalan-j2Upgrade glassfish-jaxb-txw2Upgrade jackson-annotationsUpgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade jackson-module-jaxb-annotationsUpgrade jakarta-commons-httpclientUpgrade pki-servlet-engineUpgrade glassfish-fastinfosetUpgrade apache-commons-netUpgrade velocityUpgrade resteasyUpgrade jackson-databindUpgrade jackson-jaxrs-providersUpgrade xerces-j2Upgrade jackson-jaxrs-json-providerUpgrade stax-exUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-runtimeUpgrade python-nss-docUpgrade xml-commons-resolverUpgrade jackson-coreUpgrade xml-commons-apisUpgrade slf4j-jdk14Upgrade xsomUpgrade python3-nss | May 4, 2022 | Mar 18, 2020 |
| Amazon Linux Ami 2 | — | Upgrade pki-toolsUpgrade pki-javadocUpgrade pki-kraUpgrade pki-baseUpgrade pki-base-javaUpgrade pki-serverUpgrade pki-symkeyUpgrade pki-core-debuginfoUpgrade pki-ca | Apr 23, 2021 | Mar 18, 2020 |
| Centos_linux | — | Upgrade glassfish-jaxb-runtimeUpgrade pki-symkey-debuginfoUpgrade python3-nss-debuginfoUpgrade jss-javadocUpgrade javassist-javadocUpgrade xalan-j2Upgrade apache-commons-langUpgrade slf4jUpgrade apache-commons-netUpgrade relaxngDatatypeUpgrade xsomUpgrade pki-javadocUpgrade tomcatjssUpgrade python-nss-debugsourceUpgrade pki-base-javaUpgrade python3-pkiUpgrade pki-caUpgrade jackson-coreUpgrade resteasyUpgrade xml-commons-apisUpgrade glassfish-fastinfosetUpgrade pki-servlet-4.0-apiUpgrade jss-debugsourceUpgrade jackson-databindUpgrade jackson-jaxrs-json-providerUpgrade jackson-annotationsUpgrade jackson-module-jaxb-annotationsUpgrade pki-kraUpgrade pki-toolsUpgrade pki-serverUpgrade xmlstreambufferUpgrade ldapjdkUpgrade pki-servlet-engineUpgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-coreUpgrade bea-stax-apiUpgrade ldapjdk-javadocUpgrade stax-exUpgrade pki-symkeyUpgrade apache-commons-collectionsUpgrade jakarta-commons-httpclientUpgrade pki-baseUpgrade glassfish-jaxb-txw2Upgrade jssUpgrade jss-debuginfoUpgrade python3-nssUpgrade pki-tools-debuginfoUpgrade python-nss-docUpgrade pki-core-debuginfoUpgrade jackson-jaxrs-providersUpgrade xml-commons-resolverUpgrade pki-core-debugsourceUpgrade slf4j-jdk14Upgrade velocityUpgrade javassistUpgrade xerces-j2 | Nov 5, 2020 | Mar 18, 2020 |
| Debian | — | Upgrade dogtag-pki | Jul 30, 2024 | Mar 18, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pki-symkeyUpgrade pki-caUpgrade pki-toolsUpgrade pki-serverUpgrade pki-kraUpgrade pki-base | Feb 22, 2021 | Mar 18, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-baseUpgrade pki-base-javaUpgrade pki-kraUpgrade pki-serverUpgrade pki-toolsUpgrade pki-caUpgrade pki-symkey | Apr 30, 2021 | Mar 18, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-toolsUpgrade pki-kraUpgrade pki-serverUpgrade pki-caUpgrade pki-base-javaUpgrade pki-symkeyUpgrade pki-base | Dec 16, 2020 | Mar 18, 2020 |
| Oracle_linux | — | Upgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-coreUpgrade javassistUpgrade glassfish-jaxb-txw2Upgrade xml-commons-resolverUpgrade ldapjdk-javadocUpgrade xerces-j2Upgrade velocityUpgrade ldapjdkUpgrade jakarta-commons-httpclientUpgrade pki-baseUpgrade stax-exUpgrade python-nss-docUpgrade xmlstreambufferUpgrade apache-commons-collectionsUpgrade python3-nssUpgrade javassist-javadocUpgrade jssUpgrade bea-stax-apiUpgrade slf4j-jdk14Upgrade glassfish-jaxb-runtimeUpgrade pki-symkeyUpgrade xml-commons-apisUpgrade xalan-j2Upgrade tomcatjssUpgrade pki-kraUpgrade pki-base-javaUpgrade apache-commons-langUpgrade pki-servlet-4.0-apiUpgrade pki-javadocUpgrade jackson-coreUpgrade slf4jUpgrade jss-javadocUpgrade jackson-jaxrs-json-providerUpgrade jackson-annotationsUpgrade glassfish-fastinfosetUpgrade pki-servlet-engineUpgrade xsomUpgrade resteasyUpgrade apache-commons-netUpgrade jackson-module-jaxb-annotationsUpgrade pki-caUpgrade pki-toolsUpgrade pki-serverUpgrade jackson-jaxrs-providersUpgrade relaxngDatatypeUpgrade jackson-databindUpgrade python3-pki | Mar 18, 2021 | Feb 3, 2020 |
| Redhat_linux | — | Upgrade jssUpgrade pki-base-javaUpgrade pki-core-debuginfoUpgrade xml-commons-resolverUpgrade pki-servlet-4.0-apiUpgrade python-nss-docUpgrade glassfish-jaxb-txw2Upgrade pki-baseUpgrade jss-debuginfoUpgrade pki-tools-debuginfoUpgrade python3-nssUpgrade apache-commons-collectionsUpgrade pki-servlet-engineUpgrade javassistUpgrade glassfish-jaxb-coreUpgrade pki-symkeyUpgrade glassfish-fastinfosetUpgrade jakarta-commons-httpclientUpgrade javassist-javadocUpgrade ldapjdk-javadocUpgrade pki-core-debugsourceUpgrade apache-commons-netUpgrade xalan-j2Upgrade bea-stax-apiUpgrade glassfish-jaxb-apiUpgrade pki-serverUpgrade pki-kraUpgrade ldapjdkUpgrade jackson-databindUpgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade slf4jUpgrade pki-caUpgrade velocityUpgrade python3-pkiUpgrade jackson-annotationsUpgrade python3-nss-debuginfoUpgrade tomcatjssUpgrade pki-toolsUpgrade relaxngDatatypeUpgrade python-nss-debugsourceUpgrade pki-javadocUpgrade slf4j-jdk14Upgrade xml-commons-apisUpgrade jackson-coreUpgrade jackson-jaxrs-json-providerUpgrade xerces-j2Upgrade resteasyUpgrade xsomUpgrade jss-javadocUpgrade stax-exUpgrade jss-debugsourceUpgrade pki-symkey-debuginfoUpgrade apache-commons-langUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-providers | Nov 5, 2020 | Mar 18, 2020 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade python3-nss-debuginfo | Mar 12, 2024 | Mar 18, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 18, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub