In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade custodiaUpgrade python3-kdcproxyUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade python3-custodiaUpgrade python3-yubico | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade drupal7Upgrade cacti | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-clientUpgrade python2-ipaserverUpgrade ipa-serverUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade ipa-common | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade pki-kraUpgrade python-nss-debugsourceUpgrade slapi-nis-debugsourceUpgrade slf4j-jdk14Upgrade python3-ipaserverUpgrade velocityUpgrade python3-custodiaUpgrade python3-nssUpgrade ipa-client-epnUpgrade ipa-server-dnsUpgrade ipa-commonUpgrade ipa-client-sambaUpgrade pki-servlet-engineUpgrade jss-debuginfoUpgrade ipa-debugsourceUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade opendnssec-debuginfoUpgrade ipa-selinuxUpgrade ldapjdk-javadocUpgrade ipa-healthcheckUpgrade javassistUpgrade resteasyUpgrade stax-exUpgrade xml-commons-apisUpgrade jakarta-commons-httpclientUpgrade pki-toolsUpgrade slf4jUpgrade slapi-nisUpgrade softhsm-develUpgrade python2-ipaclientUpgrade python2-ipalibUpgrade python3-qrcodeUpgrade ipa-clientUpgrade python-nss-docUpgrade apache-commons-langUpgrade jackson-module-jaxb-annotationsUpgrade bea-stax-apiUpgrade ipa-serverUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade python3-yubicoUpgrade pki-symkey-debuginfoUpgrade jackson-annotationsUpgrade xml-commons-resolverUpgrade opendnssecUpgrade softhsm-debugsourceUpgrade opendnssec-debugsourceUpgrade glassfish-jaxb-coreUpgrade softhsmUpgrade ipa-client-debuginfoUpgrade xsomUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-core-debuginfoUpgrade ipa-client-commonUpgrade python3-jwcryptoUpgrade pki-caUpgrade ldapjdkUpgrade glassfish-fastinfosetUpgrade slapi-nis-debuginfoUpgrade python3-nss-debuginfoUpgrade apache-commons-netUpgrade python3-pkiUpgrade ipa-healthcheck-coreUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-servlet-4.0-apiUpgrade apache-commons-collectionsUpgrade custodiaUpgrade xmlstreambufferUpgrade xerces-j2Upgrade tomcatjssUpgrade python3-ipaclientUpgrade python3-pyusbUpgrade python2-ipaserverUpgrade jackson-databindUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade glassfish-jaxb-runtimeUpgrade relaxngDatatypeUpgrade python3-ipalibUpgrade pki-symkeyUpgrade python3-kdcproxyUpgrade xalan-j2Upgrade python3-qrcode-coreUpgrade pki-core-debugsourceUpgrade ipa-server-trust-adUpgrade glassfish-jaxb-txw2Upgrade pki-tools-debuginfoUpgrade pki-baseUpgrade jss-javadocUpgrade jss-debugsourceUpgrade jssUpgrade jackson-coreUpgrade ipa-debuginfoUpgrade javassist-javadocUpgrade pki-base-javaUpgrade ipa-server-debuginfoUpgrade pki-serverUpgrade jackson-jaxrs-json-providerUpgrade bind-dyndb-ldap | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade otrs2Upgrade node-jquery | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 7.70Upgrade to drupal version 8.7.1Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade zncUpgrade cactiUpgrade gitlab-ce | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti-spine.Upgrade net-analyzer/cacti. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 32253037 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 32052261 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 32300397 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 32247800 for version 14.1.1.0.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade apache-commons-collectionsUpgrade pki-symkeyUpgrade jquery-uiUpgrade ipa-server-dnsUpgrade bea-stax-apiUpgrade slf4j-jdk14Upgrade pki-caUpgrade python-nss-docUpgrade stax-exUpgrade python2-ipaserverUpgrade velocityUpgrade ipa-server-trust-adUpgrade jackson-jaxrs-providersUpgrade ipa-healthcheck-coreUpgrade jackson-coreUpgrade ipa-selinuxUpgrade ipa-client-epnUpgrade python3-qrcodeUpgrade jssUpgrade python3-kdcproxyUpgrade python2-ipaclientUpgrade glassfish-jaxb-runtimeUpgrade pki-baseUpgrade python3-ipalibUpgrade pki-kraUpgrade python3-nssUpgrade slapi-nisUpgrade ipa-healthcheckUpgrade apache-commons-netUpgrade pki-toolsUpgrade xsomUpgrade python3-custodiaUpgrade xml-commons-resolverUpgrade python3-pyusbUpgrade pki-serverUpgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-txw2Upgrade xalan-j2Upgrade python2-ipalibUpgrade jackson-databindUpgrade relaxngDatatypeUpgrade apache-commons-langUpgrade ipa-commonUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade ldapjdkUpgrade softhsm-develUpgrade tomcatjssUpgrade slf4jUpgrade pki-base-javaUpgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-clientUpgrade softhsmUpgrade jackson-annotationsUpgrade python3-yubicoUpgrade xerces-j2Upgrade bind-dyndb-ldapUpgrade ipa-client-commonUpgrade pki-servlet-engineUpgrade glassfish-jaxb-apiUpgrade resteasyUpgrade custodiaUpgrade ipa-python-compatUpgrade python3-ipaclientUpgrade jackson-module-jaxb-annotationsUpgrade xmlstreambufferUpgrade javassist-javadocUpgrade pki-servlet-4.0-apiUpgrade python3-pkiUpgrade python3-qrcode-coreUpgrade xml-commons-apisUpgrade opendnssecUpgrade glassfish-fastinfosetUpgrade jss-javadocUpgrade ipa-client-sambaUpgrade javassistUpgrade jackson-jaxrs-json-provider | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade glassfish-jaxb-txw2Upgrade relaxngDatatypeUpgrade jackson-jaxrs-json-providerUpgrade pki-kraUpgrade jackson-coreUpgrade python2-ipaserverUpgrade pki-servlet-4.0-apiUpgrade slapi-nisUpgrade ipa-selinuxUpgrade pki-caUpgrade softhsm-debuginfoUpgrade jss-javadocUpgrade xml-commons-apisUpgrade pki-serverUpgrade custodiaUpgrade jackson-annotationsUpgrade resteasyUpgrade bea-stax-apiUpgrade xerces-j2Upgrade ipa-server-trust-ad-debuginfoUpgrade python2-ipaclientUpgrade pki-tools-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-ipaserverUpgrade opendnssec-debuginfoUpgrade ipa-client-sambaUpgrade ipa-clientUpgrade pki-core-debuginfoUpgrade apache-commons-langUpgrade pki-baseUpgrade xml-commons-resolverUpgrade ipa-server-debuginfoUpgrade pki-core-debugsourceUpgrade tomcatjssUpgrade ipa-server-trust-adUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade jackson-module-jaxb-annotationsUpgrade ldapjdkUpgrade slf4j-jdk14Upgrade python3-ipalibUpgrade apache-commons-netUpgrade jss-debugsourceUpgrade velocityUpgrade pki-servlet-engineUpgrade jss-debuginfoUpgrade ipa-python-compatUpgrade python3-ipaclientUpgrade ipa-debuginfoUpgrade apache-commons-collectionsUpgrade stax-exUpgrade python3-nss-debuginfoUpgrade pki-base-javaUpgrade python3-qrcodeUpgrade ipa-client-epnUpgrade glassfish-jaxb-coreUpgrade ipa-client-debuginfoUpgrade javassist-javadocUpgrade slf4jUpgrade softhsm-debugsourceUpgrade ipa-healthcheck-coreUpgrade softhsm-develUpgrade pki-toolsUpgrade glassfish-fastinfosetUpgrade python3-nssUpgrade glassfish-jaxb-apiUpgrade python-nss-debugsourceUpgrade python3-custodiaUpgrade ipa-debugsourceUpgrade ldapjdk-javadocUpgrade python2-ipalibUpgrade javassistUpgrade softhsmUpgrade ipa-server-commonUpgrade xsomUpgrade ipa-server-dnsUpgrade pki-symkey-debuginfoUpgrade python3-kdcproxyUpgrade jakarta-commons-httpclientUpgrade pki-symkeyNo solution existsUpgrade python3-qrcode-coreUpgrade jssUpgrade xalan-j2Upgrade bind-dyndb-ldapUpgrade opendnssecUpgrade slapi-nis-debugsourceUpgrade ipa-client-commonUpgrade python-nss-docUpgrade opendnssec-debugsourceUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade bind-dyndb-ldap-debuginfoUpgrade xmlstreambufferUpgrade glassfish-jaxb-runtimeUpgrade ipa-serverUpgrade jackson-databindUpgrade python3-pkiUpgrade jackson-jaxrs-providersUpgrade python3-yubicoUpgrade slapi-nis-debuginfo | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade otrsUpgrade cacti-spineUpgrade otrs-docUpgrade otrs-itsmUpgrade cacti | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade libjs-jquery (Ubuntu Pro)Upgrade drupal7 (Ubuntu Pro)Upgrade libjs-jquery | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub