The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slf4jUpgrade jackson-annotationsUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-netUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade resteasyUpgrade javassistUpgrade velocityUpgrade pki-servlet-engineUpgrade glassfish-jaxb-txw2Upgrade apache-commons-langUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade xalan-j2Upgrade bea-stax-apiUpgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-runtimeUpgrade stax-exUpgrade python3-nssUpgrade xsomUpgrade xerces-j2Upgrade pki-servlet-4.0-apiUpgrade python-nss-docUpgrade jackson-jaxrs-providersUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-apisUpgrade xml-commons-resolverUpgrade jackson-coreUpgrade slf4j-jdk14Upgrade xmlstreambufferUpgrade jackson-databind | May 4, 2022 | Mar 18, 2020 |
| Amazon Linux Ami 2 | — | Upgrade pki-core-debuginfoUpgrade pki-base-javaUpgrade pki-symkeyUpgrade pki-serverUpgrade pki-baseUpgrade pki-caUpgrade pki-kraUpgrade pki-toolsUpgrade pki-javadoc | Apr 23, 2021 | Mar 18, 2020 |
| Centos_linux | — | Upgrade ldapjdkUpgrade python-nss-docUpgrade pki-core-debugsourceUpgrade pki-servlet-engineUpgrade velocityUpgrade slf4j-jdk14Upgrade xerces-j2Upgrade xml-commons-resolverUpgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade jss-debuginfoUpgrade pki-baseUpgrade jssUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-txw2Upgrade jackson-jaxrs-providersUpgrade python3-nssUpgrade javassistUpgrade ldapjdk-javadocUpgrade pki-symkeyUpgrade pki-core-debuginfoUpgrade stax-exUpgrade pki-tools-debuginfoUpgrade bea-stax-apiUpgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade pki-toolsUpgrade python3-nss-debuginfoUpgrade jss-debugsourceUpgrade pki-serverUpgrade pki-javadocUpgrade xml-commons-apisUpgrade jackson-jaxrs-json-providerUpgrade relaxngDatatypeUpgrade xsomUpgrade pki-kraUpgrade glassfish-fastinfosetUpgrade pki-symkey-debuginfoUpgrade tomcatjssUpgrade pki-caUpgrade python3-pkiUpgrade jackson-annotationsUpgrade pki-base-javaUpgrade jss-javadocUpgrade jackson-databindUpgrade jackson-module-jaxb-annotationsUpgrade resteasyUpgrade xalan-j2Upgrade javassist-javadocUpgrade python-nss-debugsourceUpgrade jackson-coreUpgrade slf4jUpgrade apache-commons-netUpgrade apache-commons-lang | Nov 5, 2020 | Mar 18, 2020 |
| Debian | — | Upgrade dogtag-pki | Jul 30, 2024 | Mar 18, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pki-baseUpgrade pki-toolsUpgrade pki-symkeyUpgrade pki-caUpgrade pki-kraUpgrade pki-server | Feb 22, 2021 | Mar 18, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-toolsUpgrade pki-caUpgrade pki-symkeyUpgrade pki-baseUpgrade pki-base-javaUpgrade pki-serverUpgrade pki-kra | Apr 30, 2021 | Mar 18, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-base-javaUpgrade pki-caUpgrade pki-kraUpgrade pki-serverUpgrade pki-toolsUpgrade pki-baseUpgrade pki-symkey | Dec 16, 2020 | Mar 18, 2020 |
| Oracle_linux | — | Upgrade bea-stax-apiUpgrade glassfish-jaxb-txw2Upgrade ldapjdk-javadocUpgrade apache-commons-collectionsUpgrade jssUpgrade glassfish-jaxb-apiUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade pki-symkeyUpgrade xml-commons-resolverUpgrade stax-exUpgrade jakarta-commons-httpclientUpgrade javassistUpgrade pki-baseUpgrade python3-nssUpgrade javassist-javadocUpgrade xmlstreambufferUpgrade velocityUpgrade glassfish-jaxb-runtimeUpgrade xerces-j2Upgrade python-nss-docUpgrade ldapjdkUpgrade tomcatjssUpgrade apache-commons-langUpgrade pki-servlet-4.0-apiUpgrade jackson-coreUpgrade pki-serverUpgrade jackson-jaxrs-providersUpgrade pki-base-javaUpgrade xml-commons-apisUpgrade relaxngDatatypeUpgrade pki-javadocUpgrade pki-toolsUpgrade jackson-jaxrs-json-providerUpgrade jackson-annotationsUpgrade pki-servlet-engineUpgrade xalan-j2Upgrade xsomUpgrade glassfish-fastinfosetUpgrade pki-kraUpgrade slf4jUpgrade python3-pkiUpgrade apache-commons-netUpgrade jackson-databindUpgrade resteasyUpgrade jackson-module-jaxb-annotationsUpgrade pki-caUpgrade jss-javadoc | Mar 18, 2021 | Feb 3, 2020 |
| Redhat_linux | — | Upgrade pki-base-javaUpgrade ldapjdk-javadocUpgrade bea-stax-apiUpgrade xalan-j2Upgrade python-nss-docUpgrade pki-servlet-engineUpgrade pki-core-debugsourceUpgrade glassfish-fastinfosetUpgrade pki-symkeyUpgrade pki-core-debuginfoUpgrade jssUpgrade apache-commons-netUpgrade javassistUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-coreUpgrade pki-baseUpgrade jss-debuginfoUpgrade javassist-javadocUpgrade pki-tools-debuginfoUpgrade glassfish-jaxb-txw2Upgrade python3-nssUpgrade glassfish-jaxb-apiUpgrade jakarta-commons-httpclientUpgrade xml-commons-resolverUpgrade pki-servlet-4.0-apiUpgrade jackson-jaxrs-providersUpgrade apache-commons-langUpgrade jss-debugsourceUpgrade ldapjdkUpgrade pki-toolsUpgrade pki-caUpgrade python-nss-debugsourceUpgrade pki-serverUpgrade jackson-module-jaxb-annotationsUpgrade stax-exUpgrade xerces-j2Upgrade jss-javadocUpgrade xsomUpgrade jackson-coreUpgrade jackson-jaxrs-json-providerUpgrade xmlstreambufferUpgrade resteasyUpgrade pki-symkey-debuginfoUpgrade tomcatjssUpgrade velocityUpgrade slf4jUpgrade python3-pkiUpgrade jackson-annotationsUpgrade python3-nss-debuginfoUpgrade xml-commons-apisUpgrade pki-kraUpgrade glassfish-jaxb-runtimeUpgrade jackson-databindUpgrade pki-javadocUpgrade relaxngDatatypeUpgrade slf4j-jdk14 | Nov 5, 2020 | Mar 18, 2020 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsource | Mar 12, 2024 | Mar 18, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 18, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub