jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade python3-custodiaUpgrade python3-kdcproxyUpgrade python3-qrcode | May 4, 2022 | Jan 18, 2018 |
| Alpine Linux | — | Upgrade rubyUpgrade rabbitmq-server | Aug 22, 2024 | Jan 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade python2-ipalibUpgrade rubygems-develUpgrade rubygemsUpgrade rubygem-rdocUpgrade ipa-server-dnsUpgrade rubygem-power_assertUpgrade ipa-server-commonUpgrade ruby-docUpgrade ipa-serverUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade ipa-client-commonUpgrade rubygem-jsonUpgrade python2-ipaclientUpgrade ipa-clientUpgrade rubygem-opensslUpgrade ruby-develUpgrade ruby-debuginfoUpgrade ipa-python-compatUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade ipa-server-trust-adUpgrade rubygem-xmlrpcUpgrade python2-ipaserverUpgrade ipa-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-psychUpgrade ipa-commonUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-did_you_meanUpgrade rubygem-test-unit | Oct 28, 2020 | Jan 18, 2018 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Jan 18, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 18, 2018 |
| Centos_linux | — | Upgrade pki-symkeyUpgrade pki-kraUpgrade python3-kdcproxyUpgrade python3-jwcryptoUpgrade ipa-healthcheck-coreUpgrade softhsm-debuginfoUpgrade softhsm-debugsourceUpgrade pki-caUpgrade ipa-selinuxUpgrade python3-nssUpgrade jackson-coreUpgrade xalan-j2Upgrade python3-ipaclientUpgrade relaxngDatatypeUpgrade pki-servlet-4.0-apiUpgrade pki-core-debuginfoUpgrade python3-pyusbUpgrade python3-qrcodeUpgrade glassfish-jaxb-coreUpgrade jackson-annotationsUpgrade ipa-client-epnUpgrade ipa-server-dnsUpgrade bind-dyndb-ldap-debugsourceUpgrade slf4jUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-debugsourceUpgrade bind-dyndb-ldapUpgrade glassfish-jaxb-runtimeUpgrade jssUpgrade apache-commons-netUpgrade glassfish-jaxb-txw2Upgrade ipa-server-commonUpgrade javassist-javadocUpgrade python2-ipaserverUpgrade python3-nss-debuginfoUpgrade apache-commons-collectionsUpgrade jss-debuginfoUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade xsomUpgrade pki-toolsUpgrade custodiaUpgrade jss-debugsourceUpgrade pki-serverUpgrade ipa-client-sambaUpgrade slf4j-jdk14Upgrade jackson-module-jaxb-annotationsUpgrade apache-commons-langUpgrade python3-ipalibUpgrade ipa-serverUpgrade pki-servlet-engineUpgrade jackson-jaxrs-json-providerUpgrade xmlstreambufferUpgrade ipa-commonUpgrade python2-ipaclientUpgrade pki-tools-debuginfoUpgrade ipa-python-compatUpgrade pki-baseUpgrade resteasyUpgrade slapi-nisUpgrade xerces-j2Upgrade glassfish-jaxb-apiUpgrade slapi-nis-debugsourceUpgrade python3-qrcode-coreUpgrade softhsm-develUpgrade bea-stax-apiUpgrade opendnssec-debugsourceUpgrade jakarta-commons-httpclientUpgrade ipa-healthcheckUpgrade jackson-databindUpgrade python3-custodiaUpgrade jss-javadocUpgrade ldapjdkUpgrade opendnssecUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade python3-yubicoUpgrade pki-symkey-debuginfoUpgrade xml-commons-apisUpgrade pki-core-debugsourceUpgrade xml-commons-resolverUpgrade javassistUpgrade stax-exUpgrade softhsmUpgrade tomcatjssUpgrade ipa-server-debuginfoUpgrade ipa-server-trust-adUpgrade glassfish-fastinfosetUpgrade slapi-nis-debuginfoUpgrade opendnssec-debuginfoUpgrade python3-ipaserverUpgrade ipa-clientUpgrade ldapjdk-javadocUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-pkiUpgrade pki-base-javaUpgrade jackson-jaxrs-providersUpgrade ipa-client-debuginfoUpgrade velocityUpgrade ipa-debuginfo | Oct 1, 2020 | Jan 18, 2018 |
| Freebsd | — | Upgrade rt44Upgrade rubyUpgrade rubygem-rdocUpgrade rt42 | Aug 29, 2019 | Aug 29, 2019 |
| Jquery | — | Upgrade jQuery to version 3.0.0 | Feb 6, 2018 | Jan 18, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.1.0.1.4.0 on Solaris 11.4 | Oct 19, 2018 | Jan 18, 2018 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0. | Oct 17, 2019 | Jan 18, 2018 |
| Oracle_linux | — | Upgrade xml-commons-apisUpgrade python2-ipaserverUpgrade ipa-selinuxUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade bea-stax-apiUpgrade pki-baseUpgrade jackson-module-jaxb-annotationsUpgrade slapi-nisUpgrade javassist-javadocUpgrade xmlstreambufferUpgrade python2-ipaclientUpgrade ipa-server-commonUpgrade jss-javadocUpgrade ldapjdkUpgrade ipa-clientUpgrade ipa-healthcheckUpgrade ipa-serverUpgrade xerces-j2Upgrade custodiaUpgrade jackson-databindUpgrade jackson-coreUpgrade xml-commons-resolverUpgrade xsomUpgrade pki-servlet-4.0-apiUpgrade apache-commons-netUpgrade pki-caUpgrade python3-pkiUpgrade python3-yubicoUpgrade jackson-jaxrs-json-providerUpgrade python3-ipaserverUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-langUpgrade glassfish-jaxb-txw2Upgrade python3-ipalibUpgrade tomcatjssUpgrade xalan-j2Upgrade resteasyUpgrade python-nss-docUpgrade python3-qrcode-coreUpgrade glassfish-jaxb-apiUpgrade python3-nssUpgrade ipa-python-compatUpgrade slf4j-jdk14Upgrade python2-ipalibUpgrade glassfish-fastinfosetUpgrade pki-servlet-engineUpgrade ipa-client-commonUpgrade javassistUpgrade jackson-jaxrs-providersUpgrade ipa-healthcheck-coreUpgrade softhsm-develUpgrade softhsmUpgrade jackson-annotationsUpgrade pki-base-javaUpgrade jssUpgrade velocityUpgrade pki-serverUpgrade ipa-server-dnsUpgrade opendnssecUpgrade ldapjdk-javadocUpgrade python3-custodiaUpgrade pki-kraUpgrade python3-ipaclientUpgrade glassfish-jaxb-coreUpgrade python3-jwcryptoUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade bind-dyndb-ldapUpgrade pki-toolsUpgrade ipa-client-epnUpgrade python3-qrcodeUpgrade pki-symkeyUpgrade apache-commons-collectionsUpgrade ipa-client-sambaUpgrade stax-exUpgrade jakarta-commons-httpclientUpgrade relaxngDatatypeUpgrade slf4j | Oct 7, 2020 | Jun 27, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Jan 18, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2015 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 18, 2018 |
| Redhat_linux | — | Upgrade ipa-selinuxUpgrade ipa-server-dnsUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldapUpgrade glassfish-jaxb-apiUpgrade slf4j-jdk14Upgrade ldapjdk-javadocUpgrade jackson-module-jaxb-annotationsUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-jwcryptoUpgrade pki-toolsUpgrade ipa-python-compatUpgrade stax-exUpgrade slapi-nis-debugsourceUpgrade opendnssec-debuginfoUpgrade jakarta-commons-httpclientUpgrade jss-debuginfoUpgrade jssUpgrade ipa-client-epnUpgrade jackson-annotationsUpgrade python3-qrcodeUpgrade relaxngDatatypeUpgrade jss-debugsourceUpgrade pki-servlet-engineUpgrade jackson-jaxrs-providersUpgrade python3-ipaclientUpgrade xsomUpgrade pki-kraUpgrade python3-qrcode-coreUpgrade softhsm-develUpgrade pki-serverUpgrade ipa-debuginfoUpgrade xml-commons-apisUpgrade javassistUpgrade pki-symkey-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-client-sambaUpgrade python3-ipaserverUpgrade velocityUpgrade slf4jUpgrade python-nss-debugsourceUpgrade softhsmUpgrade bind-dyndb-ldap-debuginfoUpgrade opendnssecUpgrade python2-ipalibUpgrade python3-custodiaUpgrade softhsm-debugsourceUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade pki-core-debuginfoUpgrade python3-pkiUpgrade pki-symkeyUpgrade javassist-javadocUpgrade apache-commons-collectionsUpgrade custodiaUpgrade pki-baseUpgrade python3-pyusbUpgrade resteasyUpgrade python-nss-docUpgrade python2-ipaserverNo solution existsUpgrade jss-javadocUpgrade ldapjdkUpgrade python3-yubicoUpgrade ipa-serverUpgrade opendnssec-debugsourceUpgrade pki-core-debugsourceUpgrade pki-caUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-coreUpgrade xalan-j2Upgrade ipa-server-debuginfoUpgrade ipa-healthcheck-coreUpgrade jackson-jaxrs-json-providerUpgrade apache-commons-langUpgrade ipa-server-commonUpgrade pki-servlet-4.0-apiUpgrade glassfish-fastinfosetUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-kdcproxyUpgrade xml-commons-resolverUpgrade python3-ipalibUpgrade python2-ipaclientUpgrade slapi-nis-debuginfoUpgrade pki-base-javaUpgrade glassfish-jaxb-txw2Upgrade python3-nssUpgrade apache-commons-netUpgrade ipa-debugsourceUpgrade ipa-healthcheckUpgrade jackson-coreUpgrade jackson-databindUpgrade ipa-clientUpgrade xerces-j2Upgrade tomcatjssUpgrade ipa-commonUpgrade pki-tools-debuginfoUpgrade slapi-nisUpgrade ipa-client-debuginfo | Oct 1, 2020 | Jan 18, 2018 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python3-nssUpgrade python-nss-debugsource | Mar 12, 2024 | Jan 18, 2018 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-develUpgrade ruby2.5 | Mar 21, 2020 | Jan 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub