In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-yubicoUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade custodiaUpgrade python3-custodiaUpgrade python3-jwcryptoUpgrade python3-qrcode | May 4, 2022 | Feb 20, 2019 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaclientUpgrade ipa-clientUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-serverUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-debuginfoUpgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade ipa-server-common | Oct 28, 2020 | Feb 20, 2019 |
| Centos_linux | — | Upgrade xml-commons-resolverUpgrade opendnssec-debuginfoUpgrade glassfish-jaxb-txw2Upgrade jss-debuginfoUpgrade glassfish-jaxb-coreUpgrade python2-ipaclientUpgrade custodiaUpgrade pki-servlet-engineUpgrade ipa-server-debuginfoUpgrade pki-symkeyUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-runtimeUpgrade python2-ipaserverUpgrade jackson-jaxrs-providersUpgrade softhsmUpgrade python3-custodiaUpgrade ldapjdkUpgrade ipa-server-dnsUpgrade softhsm-debuginfoUpgrade ipa-server-trust-adUpgrade python3-kdcproxyUpgrade python-nss-docUpgrade slf4j-jdk14Upgrade python3-yubicoUpgrade pki-core-debuginfoUpgrade xmlstreambufferUpgrade softhsm-debugsourceUpgrade pki-tools-debuginfoUpgrade velocityUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade jackson-databindUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade apache-commons-collectionsUpgrade opendnssec-debugsourceUpgrade pki-core-debugsourceUpgrade jssUpgrade python3-nssUpgrade ipa-debugsourceUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade python3-pyusbUpgrade pki-baseUpgrade bea-stax-apiUpgrade slapi-nis-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade slapi-nisUpgrade xerces-j2Upgrade python3-ipalibUpgrade stax-exUpgrade apache-commons-langUpgrade jss-javadocUpgrade ipa-client-epnUpgrade xsomUpgrade slf4jUpgrade python3-pkiUpgrade jackson-coreUpgrade ipa-commonUpgrade pki-serverUpgrade opendnssecUpgrade jss-debugsourceUpgrade ipa-server-commonUpgrade python-nss-debugsourceUpgrade ipa-healthcheckUpgrade ipa-serverUpgrade bind-dyndb-ldapUpgrade ipa-client-debuginfoUpgrade resteasyUpgrade python3-ipaclientUpgrade pki-base-javaUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-debuginfoUpgrade pki-kraUpgrade ipa-selinuxUpgrade pki-caUpgrade tomcatjssUpgrade pki-toolsUpgrade pki-symkey-debuginfoUpgrade jackson-module-jaxb-annotationsUpgrade python3-qrcode-coreUpgrade ipa-python-compatUpgrade xalan-j2Upgrade ipa-clientUpgrade jackson-jaxrs-json-providerUpgrade glassfish-fastinfosetUpgrade ipa-client-sambaUpgrade ldapjdk-javadocUpgrade python3-nss-debuginfoUpgrade xml-commons-apisUpgrade python3-jwcryptoUpgrade bind-dyndb-ldap-debuginfoUpgrade jackson-annotationsUpgrade slapi-nis-debuginfoUpgrade apache-commons-netUpgrade python3-ipaserverUpgrade softhsm-develUpgrade javassist-javadocUpgrade pki-servlet-4.0-apiUpgrade relaxngDatatype | Oct 1, 2020 | Feb 20, 2019 |
| Debian | — | Upgrade twitter-bootstrap4Upgrade twitter-bootstrap3 | Jul 30, 2024 | Feb 20, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2019 |
| Freebsd | — | Upgrade mantis-php71Upgrade mantis-php72Upgrade mantis-php74Upgrade mantis-php73 | Sep 28, 2019 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade pki-baseUpgrade apache-commons-collectionsUpgrade python3-qrcodeUpgrade jackson-jaxrs-json-providerUpgrade python2-ipaclientUpgrade ipa-selinuxUpgrade glassfish-jaxb-coreUpgrade python-nss-docUpgrade ipa-server-trust-adUpgrade ldapjdkUpgrade slf4j-jdk14Upgrade python3-nssUpgrade velocityUpgrade pki-servlet-engineUpgrade python3-ipalibUpgrade xmlstreambufferUpgrade jssUpgrade slapi-nisUpgrade javassistUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-apiUpgrade python3-custodiaUpgrade pki-symkeyUpgrade ipa-healthcheck-coreUpgrade jackson-jaxrs-providersUpgrade ipa-serverUpgrade xml-commons-resolverUpgrade glassfish-jaxb-runtimeUpgrade stax-exUpgrade xerces-j2Upgrade python3-kdcproxyUpgrade python3-pyusbUpgrade bea-stax-apiUpgrade jackson-databindUpgrade python3-yubicoUpgrade ipa-server-dnsUpgrade jackson-coreUpgrade python3-pkiUpgrade custodiaUpgrade ipa-clientUpgrade apache-commons-netUpgrade pki-base-javaUpgrade ipa-python-compatUpgrade javassist-javadocUpgrade pki-toolsUpgrade xsomUpgrade python3-ipaserverUpgrade softhsmUpgrade xalan-j2Upgrade python3-jwcryptoUpgrade ipa-server-commonUpgrade glassfish-jaxb-txw2Upgrade pki-caUpgrade jss-javadocUpgrade ipa-client-commonUpgrade glassfish-fastinfosetUpgrade softhsm-develUpgrade python3-qrcode-coreUpgrade python2-ipaserverUpgrade pki-serverUpgrade pki-servlet-4.0-apiUpgrade python2-ipalibUpgrade jackson-module-jaxb-annotationsUpgrade relaxngDatatypeUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade jackson-annotationsUpgrade xml-commons-apisUpgrade jakarta-commons-httpclientUpgrade bind-dyndb-ldapUpgrade tomcatjssUpgrade slf4jUpgrade resteasyUpgrade ipa-healthcheckUpgrade python3-ipaclientUpgrade pki-kraUpgrade opendnssecUpgrade ipa-commonUpgrade apache-commons-lang | Oct 7, 2020 | Feb 11, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 11, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Feb 20, 2019 |
| Redhat_linux | — | Upgrade python3-pyusbUpgrade apache-commons-netUpgrade ipa-selinuxUpgrade python3-nss-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python2-ipaserverUpgrade relaxngDatatypeUpgrade pki-toolsUpgrade ipa-server-dnsUpgrade opendnssec-debugsourceUpgrade softhsm-debuginfoUpgrade jackson-jaxrs-providersUpgrade jackson-coreUpgrade jss-debugsourceUpgrade ipa-debugsourceUpgrade python-nss-docUpgrade custodiaUpgrade pki-core-debugsourceUpgrade jss-debuginfoUpgrade xsomUpgrade python3-ipaclientUpgrade apache-commons-collectionsUpgrade softhsm-debugsourceUpgrade pki-servlet-4.0-apiUpgrade pki-symkeyUpgrade python3-nssUpgrade slf4jUpgrade pki-core-debuginfoUpgrade jssUpgrade ipa-server-trust-ad-debuginfoUpgrade slf4j-jdk14Upgrade glassfish-jaxb-txw2Upgrade ipa-healthcheck-coreUpgrade bind-dyndb-ldapUpgrade pki-caUpgrade glassfish-jaxb-runtimeUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade ipa-client-epnUpgrade glassfish-jaxb-coreUpgrade xml-commons-resolverUpgrade python-nss-debugsourceUpgrade ipa-client-sambaUpgrade javassist-javadocUpgrade jackson-databindUpgrade ipa-python-compatUpgrade softhsmUpgrade python2-ipaclientUpgrade xerces-j2Upgrade ipa-client-debuginfoUpgrade javassistUpgrade ipa-server-commonUpgrade ldapjdk-javadocUpgrade python3-jwcryptoUpgrade jakarta-commons-httpclientUpgrade softhsm-develUpgrade slapi-nis-debuginfoUpgrade ipa-client-commonUpgrade bea-stax-apiUpgrade ipa-server-trust-adUpgrade python2-ipalibUpgrade ipa-healthcheckUpgrade jackson-annotationsUpgrade jackson-jaxrs-json-providerUpgrade opendnssec-debuginfoUpgrade xalan-j2Upgrade python3-custodiaUpgrade glassfish-fastinfosetUpgrade pki-servlet-engineUpgrade ipa-commonUpgrade slapi-nisUpgrade pki-symkey-debuginfoUpgrade xmlstreambufferUpgrade python3-qrcode-coreUpgrade python3-ipaserverUpgrade resteasyUpgrade pki-tools-debuginfoUpgrade opendnssecUpgrade tomcatjssUpgrade pki-serverUpgrade xml-commons-apisUpgrade python3-pkiNo solution existsUpgrade glassfish-jaxb-apiUpgrade pki-base-javaUpgrade jackson-module-jaxb-annotationsUpgrade ipa-serverUpgrade jss-javadocUpgrade pki-kraUpgrade python3-ipalibUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade bind-dyndb-ldap-debuginfoUpgrade slapi-nis-debugsourceUpgrade stax-exUpgrade ipa-server-debuginfoUpgrade velocityUpgrade pki-baseUpgrade ldapjdkUpgrade python3-yubicoUpgrade apache-commons-lang | Oct 1, 2020 | Feb 20, 2019 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python3-nss | Mar 12, 2024 | Feb 20, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 20, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub