jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-custodiaUpgrade python3-yubicoUpgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade custodia | May 4, 2022 | Jan 18, 2018 |
| Alpine Linux | — | Upgrade rubyUpgrade rabbitmq-server | Aug 22, 2024 | Jan 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-commonUpgrade rubygem-net-telnetUpgrade rubygems-develUpgrade rubygemsUpgrade python2-ipalibUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade ipa-server-dnsUpgrade rubygem-power_assertUpgrade rubygem-io-consoleUpgrade python2-ipaclientUpgrade rubygem-psychUpgrade ipa-commonUpgrade rubyUpgrade rubygem-bundlerUpgrade ruby-libsUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade ruby-docUpgrade ipa-serverUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-did_you_meanUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade rubygem-xmlrpcUpgrade ipa-clientUpgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade rubygem-bigdecimalUpgrade rubygem-irbUpgrade ipa-client-common | Oct 28, 2020 | Jan 18, 2018 |
| Amazon_linux | — | Upgrade ruby24 | Sep 1, 2020 | Jan 18, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 18, 2018 |
| Centos_linux | — | Upgrade python-nss-docUpgrade apache-commons-collectionsUpgrade python2-ipaserverUpgrade softhsm-debugsourceUpgrade apache-commons-netUpgrade pki-symkeyUpgrade python3-kdcproxyUpgrade glassfish-jaxb-txw2Upgrade pki-core-debuginfoUpgrade python-nss-debugsourceUpgrade pki-servlet-4.0-apiUpgrade xsomUpgrade python3-pyusbUpgrade ipa-server-dnsUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade pki-caUpgrade python3-qrcodeUpgrade slf4jUpgrade custodiaUpgrade bind-dyndb-ldapUpgrade ipa-client-epnUpgrade jssUpgrade ipa-server-commonUpgrade softhsm-debuginfoUpgrade jackson-annotationsUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-jwcryptoUpgrade jss-debugsourceUpgrade pki-serverUpgrade pki-toolsUpgrade python3-ipaclientUpgrade ipa-client-sambaUpgrade relaxngDatatypeUpgrade jackson-coreUpgrade python3-nssUpgrade ipa-selinuxUpgrade glassfish-jaxb-coreUpgrade xalan-j2Upgrade python3-nss-debuginfoUpgrade pki-kraUpgrade javassist-javadocUpgrade jss-debuginfoUpgrade ipa-healthcheck-coreUpgrade bea-stax-apiUpgrade pki-base-javaUpgrade pki-baseUpgrade pki-tools-debuginfoUpgrade velocityUpgrade resteasyUpgrade apache-commons-langUpgrade xerces-j2Upgrade jackson-module-jaxb-annotationsUpgrade ipa-healthcheckUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade slapi-nis-debuginfoUpgrade ipa-server-debuginfoUpgrade softhsmUpgrade ipa-python-compatUpgrade softhsm-develUpgrade pki-symkey-debuginfoUpgrade ldapjdkUpgrade tomcatjssUpgrade python3-pkiUpgrade opendnssec-debugsourceUpgrade ldapjdk-javadocUpgrade ipa-client-debuginfoUpgrade javassistUpgrade xml-commons-apisUpgrade opendnssec-debuginfoUpgrade jackson-jaxrs-providersUpgrade opendnssecUpgrade python2-ipalibUpgrade pki-core-debugsourceUpgrade glassfish-fastinfosetUpgrade jss-javadocUpgrade jakarta-commons-httpclientUpgrade ipa-client-commonUpgrade stax-exUpgrade python3-ipaserverUpgrade python3-yubicoUpgrade xml-commons-resolverUpgrade python3-custodiaUpgrade python3-ipalibUpgrade slf4j-jdk14Upgrade jackson-databindUpgrade glassfish-jaxb-apiUpgrade ipa-commonUpgrade python3-qrcode-coreUpgrade xmlstreambufferUpgrade jackson-jaxrs-json-providerUpgrade slapi-nisUpgrade ipa-server-trust-adUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-serverUpgrade pki-servlet-engineUpgrade python2-ipaclientUpgrade slapi-nis-debugsource | Oct 1, 2020 | Jan 18, 2018 |
| Freebsd | — | Upgrade rt44Upgrade rubyUpgrade rubygem-rdocUpgrade rt42 | Aug 29, 2019 | Aug 29, 2019 |
| Jquery | — | Upgrade jQuery to version 3.0.0 | Feb 6, 2018 | Jan 18, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.1.0.1.4.0 on Solaris 11.4 | Oct 19, 2018 | Jan 18, 2018 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0. | Oct 17, 2019 | Jan 18, 2018 |
| Oracle_linux | — | Upgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-apiUpgrade python3-ipaclientUpgrade slf4j-jdk14Upgrade pki-symkeyUpgrade pki-kraUpgrade python3-nssUpgrade apache-commons-collectionsUpgrade glassfish-fastinfosetUpgrade javassistUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade jakarta-commons-httpclientUpgrade ipa-client-commonUpgrade relaxngDatatypeUpgrade bind-dyndb-ldapUpgrade python3-jwcryptoUpgrade slf4jUpgrade jackson-annotationsUpgrade ipa-healthcheck-coreUpgrade stax-exUpgrade jackson-jaxrs-providersUpgrade pki-toolsUpgrade ipa-python-compatUpgrade jssUpgrade pki-base-javaUpgrade python3-qrcodeUpgrade ipa-client-epnUpgrade softhsmUpgrade ipa-client-sambaUpgrade python3-pyusbUpgrade python-nss-docUpgrade pki-servlet-engineUpgrade velocityUpgrade ldapjdk-javadocUpgrade python3-custodiaUpgrade opendnssecUpgrade softhsm-develUpgrade python2-ipalibUpgrade pki-serverUpgrade ipa-server-dnsUpgrade python3-ipalibUpgrade xml-commons-resolverUpgrade python2-ipaserverUpgrade python3-ipaserverUpgrade jackson-jaxrs-json-providerUpgrade jackson-coreUpgrade tomcatjssUpgrade apache-commons-langUpgrade xsomUpgrade xalan-j2Upgrade bea-stax-apiUpgrade ipa-commonUpgrade xml-commons-apisUpgrade jss-javadocUpgrade ipa-server-commonUpgrade javassist-javadocUpgrade apache-commons-netUpgrade pki-baseUpgrade ipa-selinuxUpgrade pki-servlet-4.0-apiUpgrade python3-yubicoUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade xmlstreambufferUpgrade custodiaUpgrade resteasyUpgrade slapi-nisUpgrade pki-caUpgrade ipa-healthcheckUpgrade ipa-serverUpgrade xerces-j2Upgrade glassfish-jaxb-txw2Upgrade jackson-module-jaxb-annotationsUpgrade python3-pkiUpgrade ldapjdkUpgrade ipa-clientUpgrade glassfish-jaxb-runtimeUpgrade jackson-databind | Oct 7, 2020 | Jun 27, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Jan 18, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2015 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 18, 2018 |
| Redhat_linux | — | Upgrade xsomUpgrade stax-exUpgrade python3-ipaclientUpgrade python3-nss-debuginfoUpgrade ipa-debuginfoUpgrade ldapjdk-javadocUpgrade python3-custodiaUpgrade relaxngDatatypeUpgrade jssUpgrade python2-ipalibUpgrade jss-debuginfoUpgrade slf4jUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-serverUpgrade xml-commons-apisUpgrade jakarta-commons-httpclientUpgrade ipa-selinuxUpgrade pki-symkey-debuginfoUpgrade softhsm-develUpgrade ipa-server-dnsUpgrade slf4j-jdk14Upgrade python3-ipaserverUpgrade softhsm-debuginfoUpgrade pki-kraUpgrade python3-qrcode-coreUpgrade ipa-python-compatUpgrade softhsmUpgrade javassistUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade bind-dyndb-ldap-debuginfoUpgrade opendnssec-debuginfoUpgrade jackson-jaxrs-providersUpgrade jss-debugsourceUpgrade slapi-nis-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade velocityUpgrade opendnssecUpgrade glassfish-jaxb-apiUpgrade python3-qrcodeUpgrade bind-dyndb-ldapUpgrade jackson-annotationsUpgrade pki-servlet-engineUpgrade pki-toolsUpgrade python-nss-debugsourceUpgrade python3-jwcryptoUpgrade pki-tools-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade ipa-clientUpgrade slapi-nisUpgrade python3-ipalibUpgrade python3-kdcproxyUpgrade ipa-client-debuginfoUpgrade python2-ipaclientUpgrade ipa-server-commonUpgrade glassfish-jaxb-txw2Upgrade opendnssec-debugsourceUpgrade apache-commons-collectionsUpgrade ipa-serverUpgrade xmlstreambufferUpgrade bea-stax-apiUpgrade xml-commons-resolverUpgrade softhsm-debugsourceUpgrade python3-yubicoUpgrade slapi-nis-debuginfoUpgrade pki-symkeyUpgrade pki-core-debugsourceUpgrade python3-nssUpgrade pki-base-javaUpgrade pki-baseUpgrade ldapjdkUpgrade ipa-commonUpgrade python-nss-docNo solution existsUpgrade ipa-healthcheckUpgrade xalan-j2Upgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade xerces-j2Upgrade glassfish-jaxb-coreUpgrade resteasyUpgrade ipa-server-debuginfoUpgrade ipa-healthcheck-coreUpgrade jss-javadocUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-runtimeUpgrade ipa-debugsourceUpgrade apache-commons-netUpgrade python3-pkiUpgrade pki-servlet-4.0-apiUpgrade javassist-javadocUpgrade tomcatjssUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-pyusbUpgrade custodiaUpgrade pki-caUpgrade jackson-coreUpgrade pki-core-debuginfoUpgrade ipa-client-commonUpgrade apache-commons-langUpgrade jackson-databind | Oct 1, 2020 | Jan 18, 2018 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade python3-nss-debuginfo | Mar 12, 2024 | Jan 18, 2018 |
| Suse | — | Upgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-develUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlib | Mar 21, 2020 | Jan 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub