jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade python3-custodiaUpgrade python3-yubicoUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade custodiaUpgrade python3-qrcode-core | May 4, 2022 | Jan 18, 2018 |
| Alpine Linux | — | Upgrade rabbitmq-serverUpgrade ruby | Aug 22, 2024 | Jan 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ruby-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimalUpgrade ipa-client-commonUpgrade ruby-libsUpgrade ipa-serverUpgrade rubygem-irbUpgrade rubygem-xmlrpcUpgrade rubygem-rakeUpgrade rubygem-bundlerUpgrade python2-ipaserverUpgrade rubygem-jsonUpgrade ipa-clientUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-test-unitUpgrade ipa-server-trust-adUpgrade rubygem-io-consoleUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade rubygem-opensslUpgrade ipa-commonUpgrade ipa-debuginfoUpgrade rubygem-psychUpgrade rubyUpgrade ipa-server-commonUpgrade rubygems-develUpgrade python2-ipalibUpgrade rubygemsUpgrade rubygem-power_assertUpgrade ipa-server-dnsUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygem-rdoc | Oct 28, 2020 | Jan 18, 2018 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Jan 18, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 18, 2018 |
| Centos_linux | — | Upgrade apache-commons-netUpgrade ipa-client-epnUpgrade python-nss-debugsourceUpgrade bind-dyndb-ldapUpgrade pki-caUpgrade pki-servlet-4.0-apiUpgrade softhsm-debugsourceUpgrade ipa-server-dnsUpgrade ipa-debugsourceUpgrade python3-qrcodeUpgrade python3-nssUpgrade ipa-selinuxUpgrade softhsm-debuginfoUpgrade jackson-coreUpgrade slf4jUpgrade relaxngDatatypeUpgrade jssUpgrade python3-ipaclientUpgrade xalan-j2Upgrade python3-pyusbUpgrade python3-jwcryptoUpgrade pki-kraUpgrade glassfish-jaxb-coreUpgrade jss-debugsourceUpgrade pki-toolsUpgrade python3-kdcproxyUpgrade ipa-healthcheck-coreUpgrade apache-commons-collectionsUpgrade pki-serverUpgrade custodiaUpgrade ipa-client-sambaUpgrade pki-symkeyUpgrade xsomUpgrade ipa-server-commonUpgrade pki-core-debuginfoUpgrade jss-debuginfoUpgrade python-nss-docUpgrade javassist-javadocUpgrade python2-ipaserverUpgrade python3-nss-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade jackson-annotationsUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade glassfish-jaxb-txw2Upgrade python2-ipaclientUpgrade ipa-python-compatUpgrade apache-commons-langUpgrade pki-tools-debuginfoUpgrade ldapjdk-javadocUpgrade jackson-jaxrs-json-providerUpgrade pki-base-javaUpgrade opendnssec-debuginfoUpgrade velocityUpgrade glassfish-fastinfosetUpgrade python2-ipalibUpgrade jackson-jaxrs-providersUpgrade pki-symkey-debuginfoUpgrade python3-pkiUpgrade xerces-j2Upgrade stax-exUpgrade tomcatjssUpgrade pki-baseUpgrade xmlstreambufferUpgrade python3-yubicoUpgrade resteasyUpgrade softhsmUpgrade ldapjdkUpgrade ipa-server-trust-adUpgrade slapi-nis-debuginfoUpgrade ipa-server-debuginfoUpgrade xml-commons-resolverUpgrade jackson-module-jaxb-annotationsUpgrade jss-javadocUpgrade ipa-commonUpgrade javassistUpgrade ipa-client-commonUpgrade ipa-serverUpgrade jackson-databindUpgrade softhsm-develUpgrade pki-core-debugsourceUpgrade ipa-client-debuginfoUpgrade jakarta-commons-httpclientUpgrade python3-qrcode-coreUpgrade xml-commons-apisUpgrade ipa-clientUpgrade ipa-healthcheckUpgrade opendnssecUpgrade bea-stax-apiUpgrade opendnssec-debugsourceUpgrade python3-ipalibUpgrade python3-custodiaUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-debuginfoUpgrade pki-servlet-engineUpgrade slf4j-jdk14Upgrade python3-ipaserverUpgrade slapi-nisUpgrade glassfish-jaxb-apiUpgrade slapi-nis-debugsource | Oct 1, 2020 | Jan 18, 2018 |
| Freebsd | — | Upgrade rt42Upgrade rubygem-rdocUpgrade rubyUpgrade rt44 | Aug 29, 2019 | Aug 29, 2019 |
| Jquery | — | Upgrade jQuery to version 3.0.0 | Feb 6, 2018 | Jan 18, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.1.0.1.4.0 on Solaris 11.4 | Oct 19, 2018 | Jan 18, 2018 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0. | Oct 17, 2019 | Jan 18, 2018 |
| Oracle_linux | — | Upgrade xerces-j2Upgrade apache-commons-langUpgrade ipa-server-commonUpgrade xsomUpgrade python2-ipaclientUpgrade xalan-j2Upgrade slapi-nisUpgrade jss-javadocUpgrade xmlstreambufferUpgrade pki-caUpgrade ipa-serverUpgrade ipa-selinuxUpgrade pki-baseUpgrade pki-servlet-4.0-apiUpgrade ipa-healthcheckUpgrade resteasyUpgrade custodiaUpgrade javassist-javadocUpgrade apache-commons-netUpgrade jackson-module-jaxb-annotationsUpgrade python3-ipaserverUpgrade python3-yubicoUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade python3-pkiUpgrade xml-commons-resolverUpgrade ldapjdkUpgrade python3-ipalibUpgrade glassfish-jaxb-txw2Upgrade xml-commons-apisUpgrade jackson-databindUpgrade jackson-coreUpgrade bea-stax-apiUpgrade glassfish-jaxb-runtimeUpgrade ipa-clientUpgrade jackson-jaxrs-json-providerUpgrade tomcatjssUpgrade ipa-commonUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade ipa-client-epnUpgrade ipa-python-compatUpgrade jssUpgrade pki-base-javaUpgrade jackson-jaxrs-providersUpgrade python3-jwcryptoUpgrade pki-toolsUpgrade python2-ipalibUpgrade python3-ipaclientUpgrade glassfish-jaxb-apiUpgrade jakarta-commons-httpclientUpgrade python3-nssUpgrade relaxngDatatypeUpgrade ipa-client-commonUpgrade javassistUpgrade python-nss-docUpgrade apache-commons-collectionsUpgrade stax-exUpgrade slf4jUpgrade python3-qrcode-coreUpgrade pki-serverUpgrade velocityUpgrade glassfish-fastinfosetUpgrade pki-kraUpgrade python3-custodiaUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade pki-servlet-engineUpgrade python3-pyusbUpgrade pki-symkeyUpgrade opendnssecUpgrade ipa-server-dnsUpgrade ipa-client-sambaUpgrade ldapjdk-javadocUpgrade bind-dyndb-ldapUpgrade ipa-healthcheck-coreUpgrade jackson-annotationsUpgrade softhsm-develUpgrade softhsm | Oct 7, 2020 | Jun 27, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Jan 18, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2015 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 18, 2018 |
| Redhat_linux | — | Upgrade jackson-jaxrs-providersUpgrade bind-dyndb-ldap-debuginfoUpgrade glassfish-jaxb-apiUpgrade python-nss-debugsourceUpgrade python3-qrcode-coreUpgrade pki-servlet-engineUpgrade softhsmUpgrade ipa-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-serverUpgrade python2-ipalibUpgrade xml-commons-apisUpgrade slf4jUpgrade jakarta-commons-httpclientUpgrade jackson-module-jaxb-annotationsUpgrade python3-qrcodeUpgrade opendnssec-debuginfoUpgrade opendnssecUpgrade jackson-annotationsUpgrade bind-dyndb-ldapUpgrade python3-ipaclientUpgrade python3-ipaserverUpgrade ldapjdk-javadocUpgrade velocityUpgrade slf4j-jdk14Upgrade jss-debuginfoUpgrade xsomUpgrade javassistUpgrade ipa-server-dnsUpgrade softhsm-develUpgrade softhsm-debuginfoUpgrade python3-jwcryptoUpgrade ipa-client-sambaUpgrade ipa-selinuxUpgrade jssUpgrade pki-toolsUpgrade relaxngDatatypeUpgrade stax-exUpgrade python3-nss-debuginfoUpgrade slapi-nis-debugsourceUpgrade jss-debugsourceUpgrade ipa-python-compatUpgrade pki-kraUpgrade python3-custodiaUpgrade ipa-client-epnUpgrade pki-symkey-debuginfoUpgrade custodiaUpgrade jackson-jaxrs-json-providerUpgrade pki-core-debuginfoUpgrade xmlstreambufferUpgrade opendnssec-debugsourceUpgrade pki-baseUpgrade python3-pkiUpgrade ipa-healthcheck-coreUpgrade jackson-databindUpgrade softhsm-debugsourceUpgrade ipa-client-debuginfoUpgrade ipa-server-commonUpgrade glassfish-jaxb-txw2Upgrade python3-ipalibUpgrade python-nss-docUpgrade python2-ipaclientUpgrade python3-kdcproxyUpgrade pki-base-javaUpgrade python3-nssUpgrade tomcatjssUpgrade ldapjdkUpgrade xalan-j2Upgrade ipa-commonUpgrade resteasyUpgrade glassfish-fastinfosetUpgrade slapi-nis-debuginfoUpgrade slapi-nisUpgrade ipa-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-commonUpgrade pki-tools-debuginfoUpgrade python3-yubicoUpgrade python3-pyusbUpgrade xml-commons-resolverUpgrade ipa-server-debuginfoUpgrade apache-commons-netUpgrade jss-javadocUpgrade ipa-clientNo solution existsUpgrade glassfish-jaxb-runtimeUpgrade ipa-server-trust-adUpgrade apache-commons-collectionsUpgrade ipa-healthcheckUpgrade pki-symkeyUpgrade pki-servlet-4.0-apiUpgrade ipa-serverUpgrade bea-stax-apiUpgrade xerces-j2Upgrade jackson-coreUpgrade glassfish-jaxb-coreUpgrade python2-ipaserverUpgrade javassist-javadocUpgrade pki-core-debugsourceUpgrade apache-commons-langUpgrade pki-ca | Oct 1, 2020 | Jan 18, 2018 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade python-nss-doc | Mar 12, 2024 | Jan 18, 2018 |
| Suse | — | Upgrade ruby2.5Upgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade ruby2.5-develUpgrade ruby2.5-doc-ri | Mar 21, 2020 | Jan 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub