In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-kdcproxyUpgrade python3-jwcryptoUpgrade python3-qrcodeUpgrade python3-custodiaUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-yubico | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-commonUpgrade ipa-clientUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-client-commonUpgrade python2-ipaclientUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade python2-ipalib | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade xerces-j2Upgrade python3-kdcproxyUpgrade javassistUpgrade tomcatjssUpgrade ipa-python-compatUpgrade ipa-server-debuginfoUpgrade ipa-serverUpgrade python2-ipaclientUpgrade jakarta-commons-httpclientUpgrade python3-pkiUpgrade jackson-jaxrs-providersUpgrade slf4j-jdk14Upgrade slapi-nisUpgrade slapi-nis-debuginfoUpgrade xml-commons-apisUpgrade slapi-nis-debugsourceUpgrade xmlstreambufferUpgrade python3-custodiaUpgrade ldapjdkUpgrade velocityUpgrade pki-symkey-debuginfoUpgrade ipa-debuginfoUpgrade python3-ipalibUpgrade jackson-jaxrs-json-providerUpgrade ipa-commonUpgrade python3-yubicoUpgrade resteasyUpgrade opendnssec-debuginfoUpgrade ipa-clientUpgrade stax-exUpgrade apache-commons-langUpgrade softhsmUpgrade pki-tools-debuginfoUpgrade bea-stax-apiUpgrade softhsm-develUpgrade pki-baseUpgrade python2-ipalibUpgrade python3-qrcode-coreUpgrade glassfish-fastinfosetUpgrade pki-servlet-engineUpgrade opendnssecUpgrade ipa-debugsourceUpgrade jss-javadocUpgrade pki-base-javaUpgrade python3-nssUpgrade softhsm-debugsourceUpgrade ldapjdk-javadocUpgrade ipa-server-trust-adUpgrade glassfish-jaxb-apiUpgrade jackson-databindUpgrade python2-ipaserverUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-selinuxUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-symkeyUpgrade pki-caUpgrade glassfish-jaxb-coreUpgrade jackson-coreUpgrade opendnssec-debugsourceUpgrade glassfish-jaxb-txw2Upgrade ipa-client-debuginfoUpgrade python3-ipaserverUpgrade python3-ipaclientUpgrade ipa-client-epnUpgrade jss-debugsourceUpgrade jssUpgrade softhsm-debuginfoUpgrade relaxngDatatypeUpgrade pki-kraUpgrade bind-dyndb-ldapUpgrade python3-jwcryptoUpgrade jackson-annotationsUpgrade python3-nss-debuginfoUpgrade pki-toolsUpgrade python-nss-docUpgrade jackson-module-jaxb-annotationsUpgrade ipa-client-commonUpgrade apache-commons-netUpgrade javassist-javadocUpgrade slf4jUpgrade ipa-server-dnsUpgrade pki-serverUpgrade pki-core-debuginfoUpgrade ipa-client-sambaUpgrade ipa-healthcheck-coreUpgrade bind-dyndb-ldap-debugsourceUpgrade xalan-j2Upgrade pki-servlet-4.0-apiUpgrade jss-debuginfoUpgrade custodiaUpgrade ipa-server-commonUpgrade xsomUpgrade python3-pyusbUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-runtimeUpgrade python-nss-debugsourceUpgrade pki-core-debugsourceUpgrade python3-qrcodeUpgrade ipa-healthcheckUpgrade xml-commons-resolver | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Jul 30, 2024 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 19, 2021 |
| Oracle_linux | — | Upgrade python2-ipaserverUpgrade jss-javadocUpgrade python3-pkiUpgrade glassfish-jaxb-runtimeUpgrade pki-servlet-4.0-apiUpgrade jackson-databindUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade jackson-jaxrs-providersUpgrade xml-commons-resolverUpgrade ipa-healthcheckUpgrade pki-serverUpgrade pki-baseUpgrade python3-yubicoUpgrade glassfish-jaxb-txw2Upgrade xerces-j2Upgrade ipa-selinuxUpgrade ipa-clientUpgrade ipa-server-commonUpgrade pki-kraUpgrade apache-commons-langUpgrade tomcatjssUpgrade resteasyUpgrade softhsm-develUpgrade bea-stax-apiUpgrade python2-ipaclientUpgrade custodiaUpgrade xml-commons-apisUpgrade python3-ipaserverUpgrade ldapjdkUpgrade python3-jwcryptoUpgrade python3-ipalibUpgrade apache-commons-netUpgrade pki-base-javaUpgrade slapi-nisUpgrade ipa-server-trust-adUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-json-providerUpgrade ipa-commonUpgrade xmlstreambufferUpgrade ipa-serverUpgrade python3-nssUpgrade apache-commons-collectionsUpgrade jackson-annotationsUpgrade ipa-python-compatUpgrade ipa-client-epnUpgrade xsomUpgrade stax-exUpgrade velocityUpgrade pki-caUpgrade softhsmUpgrade python3-custodiaUpgrade glassfish-fastinfosetUpgrade python2-ipalibUpgrade pki-servlet-engineUpgrade javassistUpgrade xalan-j2Upgrade python3-kdcproxyUpgrade javassist-javadocUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade glassfish-jaxb-apiUpgrade ipa-server-dnsUpgrade ipa-client-sambaUpgrade python3-qrcode-coreUpgrade slf4jUpgrade python-nss-docUpgrade python3-ipaclientUpgrade relaxngDatatypeUpgrade ipa-client-commonUpgrade pki-toolsUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade pki-symkeyUpgrade bind-dyndb-ldapUpgrade jssUpgrade opendnssecUpgrade python3-pyusb | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade python-nss-debugsourceUpgrade python3-qrcodeUpgrade pki-servlet-4.0-apiUpgrade ipa-server-commonUpgrade jss-debugsourceUpgrade ldapjdk-javadocUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-kraUpgrade xalan-j2Upgrade python2-ipalibUpgrade xsomUpgrade slf4jUpgrade javassist-javadocUpgrade python-nss-docUpgrade apache-commons-netUpgrade ipa-server-dnsUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-client-sambaUpgrade relaxngDatatypeUpgrade pki-serverUpgrade python3-jwcryptoUpgrade xml-commons-apisUpgrade python3-custodiaUpgrade glassfish-fastinfosetUpgrade jackson-module-jaxb-annotationsUpgrade ipa-selinuxUpgrade pki-base-javaUpgrade softhsm-debuginfoUpgrade jackson-annotationsUpgrade python3-qrcode-coreUpgrade python3-ipaserverUpgrade slapi-nis-debugsourceUpgrade jss-debuginfoUpgrade python3-nss-debuginfoUpgrade pki-caUpgrade pki-toolsUpgrade javassistUpgrade ipa-client-epnUpgrade jakarta-commons-httpclientUpgrade pki-symkey-debuginfoUpgrade bind-dyndb-ldapUpgrade softhsmUpgrade jssUpgrade python3-ipaclientUpgrade xml-commons-resolverUpgrade python3-pkiUpgrade python3-yubicoUpgrade opendnssec-debugsourceUpgrade custodiaUpgrade ipa-commonUpgrade ldapjdkUpgrade pki-core-debuginfoUpgrade jackson-jaxrs-providersUpgrade slapi-nisUpgrade apache-commons-langUpgrade ipa-debugsourceUpgrade python3-pyusbUpgrade python2-ipaclientNo solution existsUpgrade pki-symkeyUpgrade softhsm-develUpgrade ipa-client-debuginfoUpgrade stax-exUpgrade opendnssec-debuginfoUpgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade softhsm-debugsourceUpgrade jackson-coreUpgrade python2-ipaserverUpgrade ipa-healthcheck-coreUpgrade glassfish-jaxb-runtimeUpgrade resteasyUpgrade ipa-serverUpgrade glassfish-jaxb-txw2Upgrade jss-javadocUpgrade ipa-server-debuginfoUpgrade glassfish-jaxb-coreUpgrade xmlstreambufferUpgrade ipa-python-compatUpgrade pki-tools-debuginfoUpgrade slf4j-jdk14Upgrade ipa-clientUpgrade ipa-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade slapi-nis-debuginfoUpgrade apache-commons-collectionsUpgrade jackson-databindUpgrade pki-baseUpgrade tomcatjssUpgrade python3-kdcproxyUpgrade python3-ipalibUpgrade opendnssecUpgrade python3-nssUpgrade ipa-server-trust-adUpgrade ipa-healthcheckUpgrade velocityUpgrade xerces-j2Upgrade jackson-jaxrs-json-providerUpgrade pki-servlet-engineUpgrade pki-core-debugsourceUpgrade ipa-client-common | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfo | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub