In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcryptoUpgrade python3-qrcodeUpgrade python3-custodiaUpgrade python3-pyusbUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade custodia | May 4, 2022 | Feb 20, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-client-commonUpgrade ipa-server-commonUpgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade ipa-debuginfo | Oct 28, 2020 | Feb 20, 2019 |
| Centos_linux | — | Upgrade pki-symkeyUpgrade jackson-jaxrs-providersUpgrade python2-ipaserverUpgrade xmlstreambufferUpgrade glassfish-jaxb-runtimeUpgrade python3-custodiaUpgrade python-nss-docUpgrade velocityUpgrade python3-kdcproxyUpgrade ipa-client-commonUpgrade ldapjdkUpgrade softhsm-debugsourceUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade apache-commons-collectionsUpgrade opendnssec-debugsourceUpgrade pki-tools-debuginfoUpgrade softhsmUpgrade pki-core-debuginfoUpgrade pki-core-debugsourceUpgrade python2-ipalibUpgrade stax-exUpgrade bea-stax-apiUpgrade ipa-debugsourceUpgrade python3-ipalibUpgrade ipa-server-debuginfoUpgrade jssUpgrade softhsm-debuginfoUpgrade python3-qrcodeUpgrade pki-servlet-engineUpgrade python3-nssUpgrade glassfish-jaxb-txw2Upgrade ipa-server-trust-adUpgrade custodiaUpgrade opendnssec-debuginfoUpgrade slf4j-jdk14Upgrade pki-baseUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-pyusbUpgrade slapi-nisUpgrade python3-yubicoUpgrade python2-ipaclientUpgrade xml-commons-resolverUpgrade slapi-nis-debugsourceUpgrade glassfish-jaxb-coreUpgrade ipa-healthcheck-coreUpgrade jss-debuginfoUpgrade xerces-j2Upgrade jackson-databindUpgrade jakarta-commons-httpclientUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade xalan-j2Upgrade python3-qrcode-coreUpgrade slf4jUpgrade softhsm-develUpgrade python3-ipaclientUpgrade ipa-debuginfoUpgrade glassfish-fastinfosetUpgrade ipa-client-epnUpgrade ipa-clientUpgrade jackson-jaxrs-json-providerUpgrade pki-base-javaUpgrade jss-debugsourceUpgrade ipa-healthcheckUpgrade ipa-server-commonUpgrade python-nss-debugsourceUpgrade pki-kraUpgrade jackson-coreUpgrade python3-jwcryptoUpgrade ldapjdk-javadocUpgrade slapi-nis-debuginfoUpgrade javassist-javadocUpgrade jackson-annotationsUpgrade xml-commons-apisUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-debuginfoUpgrade python3-ipaserverUpgrade apache-commons-netUpgrade relaxngDatatypeUpgrade ipa-python-compatUpgrade xsomUpgrade python3-pkiUpgrade bind-dyndb-ldapUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-servlet-4.0-apiUpgrade ipa-commonUpgrade jss-javadocUpgrade ipa-selinuxUpgrade resteasyUpgrade opendnssecUpgrade pki-serverUpgrade tomcatjssUpgrade pki-toolsUpgrade pki-caUpgrade jackson-module-jaxb-annotationsUpgrade pki-symkey-debuginfoUpgrade apache-commons-langUpgrade ipa-client-samba | Oct 1, 2020 | Feb 20, 2019 |
| Debian | — | Upgrade twitter-bootstrap4Upgrade twitter-bootstrap3 | Jul 30, 2024 | Feb 20, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2019 |
| Freebsd | — | Upgrade mantis-php72Upgrade mantis-php71Upgrade mantis-php73Upgrade mantis-php74 | Sep 28, 2019 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade apache-commons-collectionsUpgrade jackson-jaxrs-providersUpgrade stax-exUpgrade python3-custodiaUpgrade glassfish-jaxb-runtimeUpgrade pki-symkeyUpgrade ipa-healthcheck-coreUpgrade python2-ipaclientUpgrade python3-nssUpgrade ipa-selinuxUpgrade slf4j-jdk14Upgrade ldapjdk-javadocUpgrade javassistUpgrade python3-qrcodeUpgrade glassfish-jaxb-apiUpgrade jssUpgrade python3-yubicoUpgrade python3-ipalibUpgrade xmlstreambufferUpgrade python3-pyusbUpgrade xml-commons-resolverUpgrade slapi-nisUpgrade jackson-jaxrs-json-providerUpgrade ldapjdkUpgrade pki-servlet-engineUpgrade xerces-j2Upgrade velocityUpgrade pki-baseUpgrade ipa-serverUpgrade bea-stax-apiUpgrade jackson-databindUpgrade python-nss-docUpgrade ipa-server-trust-adUpgrade glassfish-jaxb-coreUpgrade python3-kdcproxyUpgrade jackson-coreUpgrade pki-base-javaUpgrade apache-commons-netUpgrade jackson-module-jaxb-annotationsUpgrade ipa-client-sambaUpgrade python2-ipalibUpgrade python3-pkiUpgrade apache-commons-langUpgrade pki-kraUpgrade python3-ipaclientUpgrade ipa-commonUpgrade pki-caUpgrade jss-javadocUpgrade ipa-client-commonUpgrade python3-ipaserverUpgrade xsomUpgrade glassfish-fastinfosetUpgrade softhsmUpgrade softhsm-develUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade resteasyUpgrade ipa-server-commonUpgrade tomcatjssUpgrade bind-dyndb-ldapUpgrade jakarta-commons-httpclientUpgrade xml-commons-apisUpgrade relaxngDatatypeUpgrade python2-ipaserverUpgrade pki-serverUpgrade opendnssecUpgrade ipa-server-dnsUpgrade jackson-annotationsUpgrade glassfish-jaxb-txw2Upgrade xalan-j2Upgrade ipa-clientUpgrade pki-toolsUpgrade custodiaUpgrade javassist-javadocUpgrade slf4jUpgrade ipa-healthcheckUpgrade ipa-client-epnUpgrade pki-servlet-4.0-apiUpgrade ipa-python-compat | Oct 7, 2020 | Feb 11, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 11, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Feb 20, 2019 |
| Redhat_linux | — | Upgrade ipa-healthcheckUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade pki-base-javaUpgrade slapi-nis-debuginfoNo solution existsUpgrade jackson-annotationsUpgrade glassfish-fastinfosetUpgrade ipa-serverUpgrade softhsmUpgrade python2-ipalibUpgrade ipa-commonUpgrade jackson-databindUpgrade python3-ipaserverUpgrade opendnssec-debuginfoUpgrade ldapjdkUpgrade slapi-nisUpgrade python3-qrcode-coreUpgrade ipa-server-trust-adUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade javassist-javadocUpgrade python3-pkiUpgrade pki-servlet-engineUpgrade ipa-client-debuginfoUpgrade python3-ipalibUpgrade ipa-server-commonUpgrade bind-dyndb-ldap-debuginfoUpgrade xerces-j2Upgrade jackson-module-jaxb-annotationsUpgrade ipa-client-sambaUpgrade ipa-server-debuginfoUpgrade apache-commons-langUpgrade javassistUpgrade glassfish-jaxb-apiUpgrade jss-javadocUpgrade tomcatjssUpgrade stax-exUpgrade python3-custodiaUpgrade pki-symkey-debuginfoUpgrade pki-serverUpgrade velocityUpgrade opendnssecUpgrade ipa-client-commonUpgrade pki-tools-debuginfoUpgrade xmlstreambufferUpgrade xml-commons-apisUpgrade pki-baseUpgrade softhsm-develUpgrade pki-kraUpgrade jakarta-commons-httpclientUpgrade bea-stax-apiUpgrade slapi-nis-debugsourceUpgrade resteasyUpgrade ldapjdk-javadocUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade glassfish-jaxb-coreUpgrade jss-debugsourceUpgrade xml-commons-resolverUpgrade jackson-coreUpgrade pki-toolsUpgrade ipa-debugsourceUpgrade python-nss-debugsourceUpgrade python3-kdcproxyUpgrade softhsm-debugsourceUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldapUpgrade apache-commons-netUpgrade python3-ipaclientUpgrade slf4j-jdk14Upgrade python3-qrcodeUpgrade python3-nssUpgrade apache-commons-collectionsUpgrade jss-debuginfoUpgrade pki-core-debugsourceUpgrade custodiaUpgrade ipa-client-epnUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-txw2Upgrade jssUpgrade jackson-jaxrs-providersUpgrade slf4jUpgrade glassfish-jaxb-runtimeUpgrade python3-pyusbUpgrade ipa-healthcheck-coreUpgrade pki-core-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-selinuxUpgrade opendnssec-debugsourceUpgrade relaxngDatatypeUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-symkeyUpgrade xsomUpgrade pki-caUpgrade python3-nss-debuginfoUpgrade python2-ipaserverUpgrade python-nss-docUpgrade ipa-server-dns | Oct 1, 2020 | Feb 20, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-doc | Mar 12, 2024 | Feb 20, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 20, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub