jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcode-coreUpgrade custodiaUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade python3-kdcproxyUpgrade python3-yubicoUpgrade python3-qrcodeUpgrade python3-custodia | May 4, 2022 | Jan 18, 2018 |
| Alpine Linux | — | Upgrade rubyUpgrade rabbitmq-server | Aug 22, 2024 | Jan 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-commonUpgrade rubygem-net-telnetUpgrade rubygems-develUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade ipa-server-dnsUpgrade rubygemsUpgrade python2-ipalibUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade ruby-libsUpgrade ipa-clientUpgrade rubygem-bundlerUpgrade python2-ipaserverUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade ipa-python-compatUpgrade ipa-serverUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade ipa-client-commonUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade ruby-docUpgrade python2-ipaclientUpgrade rubygem-test-unitUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubyUpgrade ipa-debuginfoUpgrade ipa-commonUpgrade ipa-server-trust-adUpgrade rubygem-xmlrpc | Oct 28, 2020 | Jan 18, 2018 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Jan 18, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 18, 2018 |
| Centos_linux | — | Upgrade softhsm-develUpgrade python3-qrcode-coreUpgrade ipa-serverUpgrade glassfish-jaxb-apiUpgrade jackson-databindUpgrade ipa-commonUpgrade stax-exUpgrade ipa-debuginfoUpgrade ipa-healthcheckUpgrade opendnssec-debugsourceUpgrade ipa-clientUpgrade pki-baseUpgrade slapi-nis-debugsourceUpgrade pki-tools-debuginfoUpgrade slf4j-jdk14Upgrade ipa-client-commonUpgrade ipa-server-debuginfoUpgrade glassfish-fastinfosetUpgrade python3-yubicoUpgrade jackson-module-jaxb-annotationsUpgrade ipa-client-debuginfoUpgrade xml-commons-apisUpgrade python2-ipaclientUpgrade pki-symkey-debuginfoUpgrade jackson-jaxrs-providersUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade pki-base-javaUpgrade softhsmUpgrade ldapjdkUpgrade ipa-server-trust-adUpgrade tomcatjssUpgrade slapi-nis-debuginfoUpgrade velocityUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-core-debugsourceUpgrade xml-commons-resolverUpgrade opendnssec-debuginfoUpgrade xmlstreambufferUpgrade resteasyUpgrade bea-stax-apiUpgrade slapi-nisUpgrade ldapjdk-javadocUpgrade python3-ipaserverUpgrade python3-custodiaUpgrade python3-ipalibUpgrade pki-servlet-engineUpgrade javassistUpgrade python3-pkiUpgrade jackson-jaxrs-json-providerUpgrade jss-javadocUpgrade apache-commons-langUpgrade xerces-j2Upgrade jakarta-commons-httpclientUpgrade opendnssecUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade jss-debugsourceUpgrade xsomUpgrade pki-symkeyUpgrade ipa-healthcheck-coreUpgrade ipa-client-epnUpgrade custodiaUpgrade python2-ipaserverUpgrade pki-kraUpgrade python3-qrcodeUpgrade jackson-annotationsUpgrade pki-core-debuginfoUpgrade python3-pyusbUpgrade javassist-javadocUpgrade pki-servlet-4.0-apiUpgrade pki-serverUpgrade pki-caUpgrade slf4jUpgrade python3-kdcproxyUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-collectionsUpgrade ipa-debugsourceUpgrade ipa-server-dnsUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-ipaclientUpgrade jss-debuginfoUpgrade bind-dyndb-ldapUpgrade softhsm-debugsourceUpgrade xalan-j2Upgrade pki-toolsUpgrade bind-dyndb-ldap-debugsourceUpgrade softhsm-debuginfoUpgrade ipa-selinuxUpgrade python3-nssUpgrade glassfish-jaxb-txw2Upgrade ipa-server-commonUpgrade glassfish-jaxb-coreUpgrade jackson-coreUpgrade apache-commons-netUpgrade python-nss-debugsourceUpgrade ipa-client-sambaUpgrade jssUpgrade relaxngDatatypeUpgrade python3-jwcrypto | Oct 1, 2020 | Jan 18, 2018 |
| Freebsd | — | Upgrade rubygem-rdocUpgrade rt42Upgrade rt44Upgrade ruby | Aug 29, 2019 | Aug 29, 2019 |
| Jquery | — | Upgrade jQuery to version 3.0.0 | Feb 6, 2018 | Jan 18, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.1.0.1.4.0 on Solaris 11.4 | Oct 19, 2018 | Jan 18, 2018 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0. | Oct 17, 2019 | Jan 18, 2018 |
| Oracle_linux | — | Upgrade pki-symkeyUpgrade ldapjdk-javadocUpgrade pki-base-javaUpgrade velocityUpgrade python3-nssUpgrade pki-serverUpgrade ipa-healthcheck-coreUpgrade stax-exUpgrade python-nss-docUpgrade ipa-client-commonUpgrade pki-servlet-engineUpgrade jakarta-commons-httpclientUpgrade jackson-jaxrs-providersUpgrade ipa-server-dnsUpgrade opendnssecUpgrade relaxngDatatypeUpgrade python2-ipalibUpgrade python3-ipaclientUpgrade glassfish-jaxb-apiUpgrade jackson-annotationsUpgrade glassfish-jaxb-coreUpgrade jssUpgrade softhsm-develUpgrade softhsmUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade python3-qrcodeUpgrade slf4j-jdk14Upgrade pki-kraUpgrade python3-custodiaUpgrade ipa-client-epnUpgrade apache-commons-collectionsUpgrade pki-toolsUpgrade ipa-client-sambaUpgrade python3-kdcproxyUpgrade bind-dyndb-ldapUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade javassistUpgrade glassfish-jaxb-runtimeUpgrade javassist-javadocUpgrade python3-pkiUpgrade xerces-j2Upgrade ipa-healthcheckUpgrade jackson-module-jaxb-annotationsUpgrade pki-servlet-4.0-apiUpgrade ipa-selinuxUpgrade xmlstreambufferUpgrade slapi-nisUpgrade pki-baseUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade ipa-clientUpgrade ldapjdkUpgrade jackson-databindUpgrade xml-commons-resolverUpgrade xsomUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade tomcatjssUpgrade apache-commons-langUpgrade jackson-coreUpgrade python3-ipaserverUpgrade ipa-serverUpgrade pki-caUpgrade python3-yubicoUpgrade bea-stax-apiUpgrade xml-commons-apisUpgrade ipa-commonUpgrade resteasyUpgrade python3-ipalibUpgrade glassfish-jaxb-txw2Upgrade custodiaUpgrade jss-javadocUpgrade ipa-server-commonUpgrade apache-commons-netUpgrade ipa-server-trust-ad | Oct 7, 2020 | Jun 27, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Jan 18, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2015 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 18, 2018 |
| Redhat_linux | — | Upgrade xml-commons-resolverUpgrade ipa-client-debuginfoUpgrade ipa-clientUpgrade jackson-coreUpgrade python3-yubicoUpgrade pki-core-debuginfoUpgrade xmlstreambufferUpgrade apache-commons-netUpgrade ipa-server-trust-adUpgrade ldapjdkUpgrade xalan-j2Upgrade slapi-nisUpgrade ipa-client-commonUpgrade python3-nssUpgrade python-nss-docUpgrade pki-core-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade jackson-databindUpgrade pki-symkeyUpgrade ipa-healthcheckUpgrade slapi-nis-debuginfoUpgrade opendnssec-debugsourceUpgrade glassfish-jaxb-coreUpgrade glassfish-fastinfosetUpgrade xerces-j2Upgrade pki-tools-debuginfoUpgrade python3-pyusbUpgrade jss-javadocUpgrade ipa-debugsourceNo solution existsUpgrade pki-servlet-4.0-apiUpgrade ipa-server-debuginfoUpgrade apache-commons-langUpgrade javassist-javadocUpgrade pki-caUpgrade pki-base-javaUpgrade python2-ipaclientUpgrade ipa-server-commonUpgrade python3-kdcproxyUpgrade python3-ipalibUpgrade glassfish-jaxb-txw2Upgrade jackson-jaxrs-json-providerUpgrade apache-commons-collectionsUpgrade tomcatjssUpgrade softhsm-debugsourceUpgrade bea-stax-apiUpgrade ipa-healthcheck-coreUpgrade python3-pkiUpgrade python2-ipaserverUpgrade resteasyUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-baseUpgrade custodiaUpgrade xsomUpgrade slf4j-jdk14Upgrade pki-serverUpgrade jakarta-commons-httpclientUpgrade opendnssecUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade slf4jUpgrade bind-dyndb-ldapUpgrade jss-debugsourceUpgrade xml-commons-apisUpgrade slapi-nis-debugsourceUpgrade ipa-client-epnUpgrade opendnssec-debuginfoUpgrade stax-exUpgrade glassfish-jaxb-apiUpgrade pki-kraUpgrade python2-ipalibUpgrade velocityUpgrade softhsmUpgrade javassistUpgrade ipa-client-sambaUpgrade ipa-python-compatUpgrade relaxngDatatypeUpgrade ipa-server-dnsUpgrade ldapjdk-javadocUpgrade python3-custodiaUpgrade softhsm-develUpgrade jss-debuginfoUpgrade python3-nss-debuginfoUpgrade softhsm-debuginfoUpgrade python3-qrcode-coreUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-providersUpgrade python3-ipaserverUpgrade ipa-selinuxUpgrade python3-jwcryptoUpgrade jssUpgrade python-nss-debugsourceUpgrade pki-toolsUpgrade pki-symkey-debuginfoUpgrade pki-servlet-engineUpgrade ipa-debuginfoUpgrade python3-qrcodeUpgrade jackson-annotationsUpgrade python3-ipaclient | Oct 1, 2020 | Jan 18, 2018 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfo | Mar 12, 2024 | Jan 18, 2018 |
| Suse | — | Upgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.5-devel | Mar 21, 2020 | Jan 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub