In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcode-coreUpgrade custodiaUpgrade python3-jwcryptoUpgrade python3-custodiaUpgrade python3-yubicoUpgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-kdcproxy | May 4, 2022 | Jan 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-debuginfoUpgrade python2-ipaclientUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-clientUpgrade ipa-server | Oct 28, 2020 | Jan 9, 2019 |
| Centos_linux | — | Upgrade pki-toolsUpgrade jakarta-commons-httpclientUpgrade python3-ipaclientUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-dnsUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-debugsourceUpgrade apache-commons-collectionsUpgrade velocityUpgrade softhsmUpgrade python3-ipaserverUpgrade slf4jUpgrade ipa-client-epnUpgrade javassistUpgrade softhsm-develUpgrade jssUpgrade stax-exUpgrade relaxngDatatypeUpgrade pki-symkey-debuginfoUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade python2-ipalibUpgrade ldapjdk-javadocUpgrade pki-servlet-engineUpgrade ipa-python-compatUpgrade bind-dyndb-ldapUpgrade slapi-nis-debugsourceUpgrade python3-qrcode-coreUpgrade xalan-j2Upgrade python3-nss-debuginfoUpgrade python3-jwcryptoUpgrade jss-debuginfoUpgrade pki-caUpgrade ipa-healthcheck-coreUpgrade pki-serverUpgrade python3-custodiaUpgrade glassfish-fastinfosetUpgrade xsomUpgrade ipa-debuginfoUpgrade pki-kraUpgrade pki-symkeyUpgrade python3-qrcodeUpgrade ipa-client-sambaUpgrade slf4j-jdk14Upgrade opendnssecUpgrade jackson-annotationsUpgrade jss-debugsourceUpgrade python-nss-docUpgrade jackson-databindUpgrade javassist-javadocUpgrade xerces-j2Upgrade glassfish-jaxb-runtimeUpgrade ipa-serverUpgrade xml-commons-resolverUpgrade python3-kdcproxyUpgrade pki-baseUpgrade xmlstreambufferUpgrade pki-core-debuginfoUpgrade apache-commons-netUpgrade opendnssec-debugsourceUpgrade ipa-server-debuginfoUpgrade jss-javadocUpgrade softhsm-debugsourceUpgrade slapi-nisUpgrade pki-base-javaUpgrade ipa-debugsourceUpgrade pki-core-debugsourceUpgrade bea-stax-apiUpgrade pki-tools-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-coreUpgrade python3-pyusbUpgrade softhsm-debuginfoUpgrade ipa-selinuxUpgrade opendnssec-debuginfoUpgrade python3-yubicoUpgrade glassfish-jaxb-txw2Upgrade ipa-clientUpgrade pki-servlet-4.0-apiUpgrade python3-pkiUpgrade ipa-client-debuginfoUpgrade slapi-nis-debuginfoUpgrade ipa-server-trust-adUpgrade jackson-jaxrs-json-providerUpgrade python3-ipalibUpgrade glassfish-jaxb-coreUpgrade ipa-client-commonUpgrade ipa-commonUpgrade tomcatjssUpgrade resteasyUpgrade xml-commons-apisUpgrade ipa-server-commonUpgrade ldapjdkUpgrade python3-nssUpgrade ipa-healthcheckUpgrade apache-commons-langUpgrade custodiaUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade bind-dyndb-ldap-debugsource | Oct 1, 2020 | Jan 9, 2019 |
| Debian | — | Upgrade twitter-bootstrap3 | Jul 30, 2024 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 27, 2023 |
| Oracle_linux | — | Upgrade glassfish-jaxb-txw2Upgrade pki-toolsUpgrade ldapjdk-javadocUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade ipa-healthcheck-coreUpgrade javassist-javadocUpgrade xalan-j2Upgrade pki-symkeyUpgrade ipa-server-commonUpgrade python3-qrcodeUpgrade apache-commons-netUpgrade python-nss-docUpgrade softhsmUpgrade python3-ipaclientUpgrade glassfish-jaxb-apiUpgrade jakarta-commons-httpclientUpgrade stax-exUpgrade pki-base-javaUpgrade pki-servlet-engineUpgrade velocityUpgrade opendnssecUpgrade python3-pyusbUpgrade glassfish-jaxb-coreUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade softhsm-develUpgrade apache-commons-collectionsUpgrade bind-dyndb-ldapUpgrade jssUpgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade javassistUpgrade python2-ipalibUpgrade python3-nssUpgrade jackson-coreUpgrade pki-baseUpgrade python3-ipalibUpgrade slf4j-jdk14Upgrade slapi-nisUpgrade python3-jwcryptoUpgrade pki-serverUpgrade jackson-annotationsUpgrade ipa-client-sambaUpgrade pki-kraUpgrade python3-yubicoUpgrade jackson-jaxrs-json-providerUpgrade jackson-jaxrs-providersUpgrade ipa-client-epnUpgrade xml-commons-resolverUpgrade ipa-commonUpgrade ldapjdkUpgrade python3-pkiUpgrade pki-servlet-4.0-apiUpgrade pki-caUpgrade jackson-databindUpgrade tomcatjssUpgrade apache-commons-langUpgrade ipa-healthcheckUpgrade jackson-module-jaxb-annotationsUpgrade jss-javadocUpgrade ipa-selinuxUpgrade xsomUpgrade xml-commons-apisUpgrade python2-ipaserverUpgrade python3-ipaserverUpgrade glassfish-jaxb-runtimeUpgrade ipa-clientUpgrade python2-ipaclientUpgrade ipa-serverUpgrade xerces-j2Upgrade ipa-server-trust-adUpgrade xmlstreambufferUpgrade resteasyUpgrade relaxngDatatypeUpgrade custodiaUpgrade bea-stax-api | Oct 7, 2020 | Jun 27, 2016 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 27, 2016 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade python3-ipaclientUpgrade jakarta-commons-httpclientUpgrade jssUpgrade pki-toolsUpgrade slapi-nis-debugsourceUpgrade ipa-commonUpgrade tomcatjssUpgrade pki-symkey-debuginfoUpgrade slf4jUpgrade ldapjdk-javadocUpgrade ipa-python-compatUpgrade jss-debugsourceUpgrade javassistUpgrade jss-debuginfoUpgrade python3-qrcodeUpgrade glassfish-jaxb-apiUpgrade resteasyUpgrade softhsm-develUpgrade pki-servlet-engineUpgrade ipa-client-epnUpgrade python-nss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-providersUpgrade ipa-selinuxUpgrade slf4j-jdk14Upgrade velocityUpgrade ipa-client-sambaUpgrade python3-ipaserverUpgrade stax-exUpgrade ipa-server-dnsUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldapUpgrade pki-serverUpgrade jss-javadocUpgrade python3-nss-debuginfoUpgrade pki-kraUpgrade ipa-healthcheckUpgrade opendnssec-debuginfoUpgrade python3-jwcryptoUpgrade bind-dyndb-ldap-debugsourceUpgrade relaxngDatatypeUpgrade python2-ipalibUpgrade xml-commons-apisUpgrade jackson-annotationsUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-custodiaUpgrade opendnssecUpgrade bea-stax-apiUpgrade ipa-debugsourceUpgrade xsomUpgrade python3-pyusbUpgrade apache-commons-langUpgrade apache-commons-netUpgrade glassfish-jaxb-runtimeUpgrade pki-symkeyUpgrade ipa-server-commonUpgrade jackson-jaxrs-json-providerUpgrade ipa-debuginfoUpgrade glassfish-jaxb-txw2Upgrade python-nss-docUpgrade softhsm-debugsourceUpgrade xmlstreambufferUpgrade javassist-javadocUpgrade ipa-healthcheck-coreUpgrade pki-core-debugsourceUpgrade jackson-databindUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-coreUpgrade python3-pkiUpgrade xml-commons-resolverUpgrade python3-yubicoUpgrade custodiaUpgrade pki-core-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-coreUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade ipa-client-debuginfoUpgrade apache-commons-collectionsUpgrade slapi-nisUpgrade python2-ipaserverUpgrade softhsmUpgrade slapi-nis-debuginfoUpgrade opendnssec-debugsourceUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade python2-ipaclientUpgrade pki-tools-debuginfoUpgrade ldapjdkUpgrade python3-nssUpgrade ipa-serverUpgrade ipa-server-debuginfoUpgrade ipa-clientUpgrade pki-base-javaUpgrade python3-ipalibNo solution existsUpgrade pki-baseUpgrade pki-servlet-4.0-apiUpgrade xalan-j2Upgrade pki-caUpgrade xerces-j2 | Oct 1, 2020 | Jan 9, 2019 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python3-nss | Mar 12, 2024 | Jan 9, 2019 |
| Ubuntu | — | Upgrade twitter-bootstrap3 | Nov 19, 2024 | Jan 9, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub