In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-kdcproxyUpgrade python3-jwcryptoUpgrade python3-qrcodeUpgrade python3-yubicoUpgrade python3-pyusbUpgrade python3-custodiaUpgrade python3-qrcode-core | May 4, 2022 | Jul 13, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-trust-adUpgrade ipa-serverUpgrade python2-ipaserverUpgrade python2-ipaclientUpgrade ipa-clientUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade ipa-server-dns | Oct 28, 2020 | Jul 13, 2018 |
| Centos_linux | — | Upgrade softhsm-debugsourceUpgrade javassistUpgrade python2-ipaclientUpgrade slapi-nis-debugsourceUpgrade jakarta-commons-httpclientUpgrade ldapjdk-javadocUpgrade ipa-server-debuginfoUpgrade slf4j-jdk14Upgrade stax-exUpgrade bea-stax-apiUpgrade jackson-databindUpgrade resteasyUpgrade python3-qrcode-coreUpgrade ipa-debugsourceUpgrade ipa-commonUpgrade opendnssec-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade velocityUpgrade python3-nssUpgrade opendnssecUpgrade python3-yubicoUpgrade python3-pkiUpgrade pki-tools-debuginfoUpgrade softhsm-develUpgrade ipa-serverUpgrade ipa-clientUpgrade pki-base-javaUpgrade python3-custodiaUpgrade xmlstreambufferUpgrade slapi-nisUpgrade python2-ipalibUpgrade apache-commons-langUpgrade ldapjdkUpgrade ipa-server-trust-adUpgrade pki-symkey-debuginfoUpgrade python3-ipalibUpgrade glassfish-fastinfosetUpgrade slapi-nis-debuginfoUpgrade pki-baseUpgrade ipa-debuginfoUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade xerces-j2Upgrade ipa-python-compatUpgrade tomcatjssUpgrade python3-kdcproxyUpgrade jss-javadocUpgrade pki-servlet-engineUpgrade softhsmUpgrade xml-commons-apisUpgrade pki-kraUpgrade jackson-annotationsUpgrade bind-dyndb-ldapUpgrade python3-ipaclientUpgrade ipa-client-epnUpgrade softhsm-debuginfoUpgrade relaxngDatatypeUpgrade jss-debugsourceUpgrade pki-core-debugsourceUpgrade python-nss-debugsourceUpgrade opendnssec-debugsourceUpgrade pki-toolsUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade ipa-client-debuginfoUpgrade ipa-healthcheckUpgrade pki-servlet-4.0-apiUpgrade python-nss-docUpgrade jackson-module-jaxb-annotationsUpgrade custodiaUpgrade ipa-server-commonUpgrade glassfish-jaxb-coreUpgrade xsomUpgrade python3-pyusbUpgrade apache-commons-collectionsUpgrade jssUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-txw2Upgrade jackson-coreUpgrade xalan-j2Upgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-serverUpgrade slf4jUpgrade pki-core-debuginfoUpgrade javassist-javadocUpgrade apache-commons-netUpgrade ipa-healthcheck-coreUpgrade python3-nss-debuginfoUpgrade python2-ipaserverUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-selinuxUpgrade xml-commons-resolverUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-caUpgrade python3-ipaserverUpgrade pki-symkeyUpgrade jss-debuginfo | Oct 1, 2020 | Jul 13, 2018 |
| Debian | — | Upgrade twitter-bootstrap3 | Jul 30, 2024 | Jul 13, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 19, 2021 |
| Oracle_linux | — | Upgrade resteasyUpgrade softhsm-develUpgrade glassfish-jaxb-txw2Upgrade bea-stax-apiUpgrade jackson-jaxrs-json-providerUpgrade ipa-healthcheckUpgrade apache-commons-netUpgrade xerces-j2Upgrade ipa-clientUpgrade ipa-server-commonUpgrade jackson-module-jaxb-annotationsUpgrade pki-base-javaUpgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade ldapjdkUpgrade pki-kraUpgrade slapi-nisUpgrade xmlstreambufferUpgrade pki-baseUpgrade ipa-selinuxUpgrade python2-ipaclientUpgrade python3-yubicoUpgrade apache-commons-langUpgrade python3-pkiUpgrade glassfish-jaxb-runtimeUpgrade ipa-commonUpgrade jackson-jaxrs-providersUpgrade jss-javadocUpgrade jackson-databindUpgrade python3-ipalibUpgrade custodiaUpgrade pki-servlet-4.0-apiUpgrade ipa-serverUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade pki-serverUpgrade xml-commons-resolverUpgrade tomcatjssUpgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade xml-commons-apisUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade bind-dyndb-ldapUpgrade ipa-client-epnUpgrade python3-pyusbUpgrade apache-commons-collectionsUpgrade pki-toolsUpgrade ipa-client-commonUpgrade glassfish-jaxb-coreUpgrade xsomUpgrade opendnssecUpgrade javassist-javadocUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade jakarta-commons-httpclientUpgrade xalan-j2Upgrade slf4jUpgrade softhsmUpgrade python3-custodiaUpgrade glassfish-fastinfosetUpgrade pki-caUpgrade ldapjdk-javadocUpgrade jackson-annotationsUpgrade stax-exUpgrade python2-ipalibUpgrade velocityUpgrade pki-symkeyUpgrade pki-servlet-engineUpgrade jssUpgrade python3-nssUpgrade python3-qrcode-coreUpgrade ipa-client-sambaUpgrade python3-ipaclientUpgrade relaxngDatatypeUpgrade python-nss-docUpgrade python3-kdcproxy | Oct 7, 2020 | May 29, 2018 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 29, 2018 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jul 13, 2018 |
| Redhat_linux | — | Upgrade xml-commons-apisUpgrade javassistUpgrade ipa-client-epnUpgrade bind-dyndb-ldap-debugsourceUpgrade relaxngDatatypeUpgrade python3-qrcodeUpgrade jss-debugsourceUpgrade ipa-client-sambaUpgrade pki-serverUpgrade python3-qrcode-coreUpgrade ldapjdk-javadocUpgrade slf4jUpgrade ipa-server-dnsUpgrade bind-dyndb-ldap-debuginfoUpgrade xsomUpgrade jackson-annotationsUpgrade xalan-j2Upgrade pki-servlet-4.0-apiUpgrade bind-dyndb-ldapUpgrade python2-ipalibUpgrade python3-nss-debuginfoUpgrade jss-debuginfoUpgrade softhsm-debuginfoUpgrade jakarta-commons-httpclientUpgrade pki-base-javaUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-docUpgrade ipa-server-commonUpgrade pki-toolsUpgrade glassfish-fastinfosetUpgrade python3-jwcryptoUpgrade python3-ipaclientUpgrade python3-custodiaUpgrade slapi-nis-debugsourceUpgrade python3-ipaserverUpgrade pki-symkey-debuginfoUpgrade jssUpgrade softhsmUpgrade ipa-selinuxUpgrade python-nss-debugsourceUpgrade apache-commons-netUpgrade javassist-javadocUpgrade pki-caUpgrade pki-kraUpgrade python3-ipalibUpgrade glassfish-jaxb-runtimeUpgrade ldapjdkUpgrade ipa-python-compatUpgrade resteasyUpgrade glassfish-jaxb-apiUpgrade python2-ipaserverUpgrade xmlstreambufferUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade ipa-healthcheck-coreUpgrade ipa-client-commonUpgrade glassfish-jaxb-txw2Upgrade python3-pyusbUpgrade jss-javadocUpgrade apache-commons-collectionsUpgrade ipa-serverUpgrade apache-commons-langUpgrade ipa-clientUpgrade glassfish-jaxb-coreNo solution existsUpgrade ipa-debuginfoUpgrade ipa-healthcheckUpgrade opendnssecUpgrade python3-pkiUpgrade custodiaUpgrade ipa-server-debuginfoUpgrade slf4j-jdk14Upgrade ipa-debugsourceUpgrade python3-nssUpgrade ipa-commonUpgrade pki-baseUpgrade softhsm-develUpgrade bea-stax-apiUpgrade opendnssec-debugsourceUpgrade opendnssec-debuginfoUpgrade stax-exUpgrade pki-servlet-engineUpgrade python3-kdcproxyUpgrade xml-commons-resolverUpgrade jackson-databindUpgrade pki-symkeyUpgrade python2-ipaclientUpgrade tomcatjssUpgrade ipa-client-debuginfoUpgrade pki-core-debugsourceUpgrade xerces-j2Upgrade pki-core-debuginfoUpgrade ipa-server-trust-adUpgrade python3-yubicoUpgrade jackson-coreUpgrade jackson-jaxrs-providersUpgrade softhsm-debugsourceUpgrade pki-tools-debuginfoUpgrade slapi-nisUpgrade velocityUpgrade slapi-nis-debuginfo | Oct 1, 2020 | Jul 13, 2018 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfo | Mar 12, 2024 | Jul 13, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub