jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-yubicoUpgrade python3-custodiaUpgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade custodia | May 4, 2022 | Jan 18, 2018 |
| Alpine Linux | — | Upgrade rabbitmq-serverUpgrade ruby | Aug 22, 2024 | Jan 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-rdocUpgrade ipa-server-commonUpgrade ipa-server-dnsUpgrade rubygem-net-telnetUpgrade python2-ipalibUpgrade rubygem-minitestUpgrade rubygem-rakeUpgrade ipa-client-commonUpgrade ipa-clientUpgrade rubygem-psychUpgrade python2-ipaclientUpgrade rubygem-opensslUpgrade ruby-debuginfoUpgrade ipa-serverUpgrade rubygem-test-unitUpgrade ruby-docUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade rubygem-bundlerUpgrade rubygem-io-consoleUpgrade ipa-python-compatUpgrade rubygem-irbUpgrade ruby-develUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade ipa-commonUpgrade rubygem-jsonUpgrade ipa-debuginfoUpgrade ruby | Oct 28, 2020 | Jan 18, 2018 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Jan 18, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 18, 2018 |
| Centos_linux | — | Upgrade python2-ipaclientUpgrade pki-tools-debuginfoUpgrade pki-core-debugsourceUpgrade slf4j-jdk14Upgrade ipa-clientUpgrade xml-commons-resolverUpgrade pki-base-javaUpgrade velocityUpgrade pki-baseUpgrade resteasyUpgrade opendnssec-debugsourceUpgrade apache-commons-langUpgrade ldapjdkUpgrade python2-ipalibUpgrade jackson-jaxrs-providersUpgrade jackson-module-jaxb-annotationsUpgrade xerces-j2Upgrade python3-pkiUpgrade jss-javadocUpgrade python3-ipaserverUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-apisUpgrade ipa-client-commonUpgrade opendnssecUpgrade ipa-healthcheckUpgrade softhsm-develUpgrade python3-yubicoUpgrade pki-symkey-debuginfoUpgrade ipa-serverUpgrade bind-dyndb-ldap-debuginfoUpgrade slapi-nis-debugsourceUpgrade xmlstreambufferUpgrade stax-exUpgrade glassfish-jaxb-apiUpgrade jakarta-commons-httpclientUpgrade ipa-debuginfoUpgrade ipa-commonUpgrade jackson-databindUpgrade slapi-nis-debuginfoUpgrade opendnssec-debuginfoUpgrade ipa-server-trust-adUpgrade softhsmUpgrade tomcatjssUpgrade ipa-python-compatUpgrade ipa-server-debuginfoUpgrade slapi-nisUpgrade python3-custodiaUpgrade ldapjdk-javadocUpgrade javassistUpgrade python3-ipalibUpgrade pki-servlet-engineUpgrade python3-qrcode-coreUpgrade glassfish-fastinfosetUpgrade bea-stax-apiUpgrade ipa-client-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-nss-debuginfoUpgrade jackson-coreUpgrade python3-qrcodeUpgrade pki-kraUpgrade glassfish-jaxb-coreUpgrade python-nss-docUpgrade ipa-client-epnUpgrade ipa-server-commonUpgrade pki-caUpgrade jssUpgrade xalan-j2Upgrade ipa-server-dnsUpgrade python-nss-debugsourceUpgrade slf4jUpgrade apache-commons-netUpgrade jackson-annotationsUpgrade glassfish-jaxb-runtimeUpgrade python3-pyusbUpgrade pki-symkeyUpgrade softhsm-debuginfoUpgrade pki-serverUpgrade ipa-debugsourceUpgrade pki-servlet-4.0-apiUpgrade pki-toolsUpgrade glassfish-jaxb-txw2Upgrade python3-ipaclientUpgrade custodiaUpgrade python3-kdcproxyUpgrade jss-debuginfoUpgrade xsomUpgrade ipa-selinuxUpgrade relaxngDatatypeUpgrade python3-nssUpgrade jss-debugsourceUpgrade ipa-healthcheck-coreUpgrade ipa-client-sambaUpgrade pki-core-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-jwcryptoUpgrade python2-ipaserverUpgrade javassist-javadocUpgrade softhsm-debugsourceUpgrade bind-dyndb-ldapUpgrade apache-commons-collections | Oct 1, 2020 | Jan 18, 2018 |
| Freebsd | — | Upgrade rubygem-rdocUpgrade rt42Upgrade rt44Upgrade ruby | Aug 29, 2019 | Aug 29, 2019 |
| Jquery | — | Upgrade jQuery to version 3.0.0 | Feb 6, 2018 | Jan 18, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.1.0.1.4.0 on Solaris 11.4 | Oct 19, 2018 | Jan 18, 2018 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0. | Oct 17, 2019 | Jan 18, 2018 |
| Oracle_linux | — | Upgrade custodiaUpgrade pki-baseUpgrade python2-ipaclientUpgrade xerces-j2Upgrade resteasyUpgrade glassfish-jaxb-txw2Upgrade pki-servlet-4.0-apiUpgrade ipa-commonUpgrade ipa-selinuxUpgrade xmlstreambufferUpgrade slapi-nisUpgrade bea-stax-apiUpgrade python3-ipalibUpgrade ipa-healthcheckUpgrade ldapjdkUpgrade apache-commons-netUpgrade ipa-serverUpgrade pki-caUpgrade ipa-server-commonUpgrade jackson-module-jaxb-annotationsUpgrade ipa-clientUpgrade glassfish-jaxb-runtimeUpgrade jss-javadocUpgrade javassist-javadocUpgrade jackson-coreUpgrade python2-ipaserverUpgrade jackson-jaxrs-json-providerUpgrade python3-pkiUpgrade jackson-databindUpgrade tomcatjssUpgrade xalan-j2Upgrade python3-yubicoUpgrade xsomUpgrade apache-commons-langUpgrade python3-ipaserverUpgrade ipa-server-trust-adUpgrade xml-commons-resolverUpgrade xml-commons-apisUpgrade softhsmUpgrade glassfish-fastinfosetUpgrade jssUpgrade pki-base-javaUpgrade jackson-jaxrs-providersUpgrade jackson-annotationsUpgrade softhsm-develUpgrade ipa-healthcheck-coreUpgrade stax-exUpgrade apache-commons-collectionsUpgrade pki-symkeyUpgrade python2-ipalibUpgrade python-nss-docUpgrade javassistUpgrade python3-nssUpgrade glassfish-jaxb-apiUpgrade python3-ipaclientUpgrade pki-servlet-engineUpgrade ipa-client-commonUpgrade jakarta-commons-httpclientUpgrade python3-custodiaUpgrade relaxngDatatypeUpgrade slf4jUpgrade glassfish-jaxb-coreUpgrade slf4j-jdk14Upgrade pki-kraUpgrade ipa-client-sambaUpgrade pki-toolsUpgrade python3-qrcodeUpgrade ipa-server-dnsUpgrade ipa-client-epnUpgrade pki-serverUpgrade opendnssecUpgrade velocityUpgrade ldapjdk-javadocUpgrade python3-qrcode-coreUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade python3-kdcproxy | Oct 7, 2020 | Jun 27, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Jan 18, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2015 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 18, 2018 |
| Redhat_linux | — | Upgrade jackson-jaxrs-providersUpgrade python3-qrcodeUpgrade bind-dyndb-ldap-debugsourceUpgrade jss-debuginfoUpgrade python2-ipalibUpgrade javassistUpgrade velocityUpgrade xsomUpgrade pki-servlet-engineUpgrade jssUpgrade python3-jwcryptoUpgrade python-nss-debugsourceUpgrade ipa-selinuxUpgrade pki-toolsUpgrade stax-exUpgrade opendnssecUpgrade xml-commons-apisUpgrade softhsmUpgrade relaxngDatatypeUpgrade ipa-server-dnsUpgrade softhsm-develUpgrade pki-symkey-debuginfoUpgrade python3-custodiaUpgrade ldapjdk-javadocUpgrade python3-qrcode-coreUpgrade pki-kraUpgrade softhsm-debuginfoUpgrade jackson-module-jaxb-annotationsUpgrade slf4j-jdk14Upgrade jss-debugsourceUpgrade slf4jUpgrade ipa-python-compatUpgrade jakarta-commons-httpclientUpgrade python3-ipaserverUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-serverUpgrade glassfish-jaxb-apiUpgrade jackson-annotationsUpgrade python3-nss-debuginfoUpgrade ipa-debuginfoUpgrade ipa-client-sambaUpgrade bind-dyndb-ldapUpgrade opendnssec-debuginfoUpgrade slapi-nis-debugsourceUpgrade python3-ipaclientUpgrade ipa-client-epnUpgrade xalan-j2Upgrade softhsm-debugsourceUpgrade pki-caUpgrade ipa-healthcheckUpgrade jss-javadocUpgrade apache-commons-langUpgrade resteasyUpgrade xerces-j2Upgrade ipa-server-debuginfoUpgrade ipa-server-trust-adUpgrade pki-tools-debuginfoUpgrade apache-commons-collectionsUpgrade pki-base-javaUpgrade glassfish-fastinfosetUpgrade pki-baseUpgrade python3-nssUpgrade custodiaUpgrade python3-pyusbUpgrade javassist-javadocUpgrade apache-commons-netUpgrade ipa-serverUpgrade bea-stax-apiUpgrade xml-commons-resolverUpgrade opendnssec-debugsourceUpgrade pki-symkeyUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade ipa-client-commonUpgrade pki-servlet-4.0-apiUpgrade ipa-debugsourceUpgrade python3-yubicoUpgrade python2-ipaclientUpgrade ipa-server-commonUpgrade pki-core-debugsourceUpgrade glassfish-jaxb-txw2Upgrade python3-ipalibUpgrade ipa-clientUpgrade slapi-nisUpgrade jackson-databindUpgrade xmlstreambufferUpgrade python3-pkiUpgrade python3-kdcproxyUpgrade python-nss-docUpgrade tomcatjssUpgrade jackson-coreUpgrade slapi-nis-debuginfoUpgrade ipa-healthcheck-coreUpgrade ldapjdkUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade python2-ipaserverNo solution existsUpgrade glassfish-jaxb-coreUpgrade ipa-commonUpgrade ipa-client-debuginfo | Oct 1, 2020 | Jan 18, 2018 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Jan 18, 2018 |
| Suse | — | Upgrade ruby2.5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-develUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlibUpgrade ruby2.5-doc | Mar 21, 2020 | Jan 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub