In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade python3-custodiaUpgrade python3-jwcryptoUpgrade custodiaUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python3-yubico | May 4, 2022 | Feb 20, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-debuginfoUpgrade python2-ipaclientUpgrade ipa-serverUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade ipa-server-common | Oct 28, 2020 | Feb 20, 2019 |
| Centos_linux | — | Upgrade ipa-clientUpgrade python3-nss-debuginfoUpgrade xalan-j2Upgrade pki-servlet-4.0-apiUpgrade jackson-annotationsUpgrade jackson-jaxrs-json-providerUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade javassist-javadocUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-commonUpgrade bind-dyndb-ldapUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-debugsourceUpgrade pki-toolsUpgrade slf4jUpgrade xml-commons-apisUpgrade jss-debugsourceUpgrade tomcatjssUpgrade python3-qrcode-coreUpgrade apache-commons-netUpgrade xsomUpgrade ipa-python-compatUpgrade pki-base-javaUpgrade resteasyUpgrade relaxngDatatypeUpgrade pki-caUpgrade pki-kraUpgrade ipa-selinuxUpgrade bind-dyndb-ldap-debugsourceUpgrade opendnssecUpgrade python3-ipaclientUpgrade ipa-debuginfoUpgrade jackson-coreUpgrade apache-commons-langUpgrade softhsm-develUpgrade ipa-client-debuginfoUpgrade python3-jwcryptoUpgrade jss-javadocUpgrade slapi-nis-debuginfoUpgrade python3-pkiUpgrade ipa-commonUpgrade pki-symkey-debuginfoUpgrade ipa-serverUpgrade ldapjdk-javadocUpgrade ipa-healthcheckUpgrade pki-serverUpgrade ipa-client-sambaUpgrade glassfish-fastinfosetUpgrade xmlstreambufferUpgrade ipa-client-commonUpgrade pki-core-debugsourceUpgrade softhsm-debugsourceUpgrade glassfish-jaxb-apiUpgrade python3-yubicoUpgrade python3-ipalibUpgrade stax-exUpgrade ipa-debugsourceUpgrade xerces-j2Upgrade ipa-server-trust-ad-debuginfoUpgrade python3-pyusbUpgrade pki-symkeyUpgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-providersUpgrade python2-ipaserverUpgrade softhsmUpgrade pki-tools-debuginfoUpgrade slf4j-jdk14Upgrade jackson-databindUpgrade ipa-server-trust-adUpgrade python3-custodiaUpgrade jssUpgrade pki-core-debuginfoUpgrade softhsm-debuginfoUpgrade javassistUpgrade velocityUpgrade bea-stax-apiUpgrade python3-kdcproxyUpgrade pki-baseUpgrade slapi-nisUpgrade slapi-nis-debugsourceUpgrade ipa-healthcheck-coreUpgrade ipa-server-dnsUpgrade jakarta-commons-httpclientUpgrade python3-qrcodeUpgrade ipa-server-debuginfoUpgrade python-nss-docUpgrade ldapjdkUpgrade python2-ipalibUpgrade opendnssec-debuginfoUpgrade apache-commons-collectionsUpgrade opendnssec-debugsourceUpgrade xml-commons-resolverUpgrade pki-servlet-engineUpgrade python2-ipaclientUpgrade jss-debuginfoUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-coreUpgrade custodiaUpgrade python3-nss | Oct 1, 2020 | Feb 20, 2019 |
| Debian | — | Upgrade twitter-bootstrap4Upgrade twitter-bootstrap3 | Jul 30, 2024 | Feb 20, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2019 |
| Freebsd | — | Upgrade mantis-php73Upgrade mantis-php74Upgrade mantis-php71Upgrade mantis-php72 | Sep 28, 2019 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade xmlstreambufferUpgrade ipa-server-trust-adUpgrade ipa-healthcheck-coreUpgrade bea-stax-apiUpgrade pki-baseUpgrade javassistUpgrade velocityUpgrade pki-servlet-engineUpgrade python3-ipalibUpgrade xml-commons-resolverUpgrade slf4j-jdk14Upgrade python3-yubicoUpgrade ldapjdkUpgrade jackson-databindUpgrade python3-nssUpgrade python3-qrcodeUpgrade python2-ipaclientUpgrade stax-exUpgrade jssUpgrade slapi-nisUpgrade ipa-selinuxUpgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-coreUpgrade jackson-jaxrs-providersUpgrade pki-symkeyUpgrade python3-custodiaUpgrade jackson-jaxrs-json-providerUpgrade xerces-j2Upgrade glassfish-jaxb-runtimeUpgrade apache-commons-collectionsUpgrade ldapjdk-javadocUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python-nss-docUpgrade ipa-serverUpgrade python3-ipaserverUpgrade slf4jUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-txw2Upgrade custodiaUpgrade softhsm-develUpgrade pki-serverUpgrade pki-base-javaUpgrade jackson-coreUpgrade jackson-annotationsUpgrade apache-commons-netUpgrade python2-ipaserverUpgrade python3-pkiUpgrade python3-ipaclientUpgrade pki-kraUpgrade opendnssecUpgrade apache-commons-langUpgrade ipa-commonUpgrade bind-dyndb-ldapUpgrade xml-commons-apisUpgrade tomcatjssUpgrade resteasyUpgrade javassist-javadocUpgrade ipa-server-commonUpgrade relaxngDatatypeUpgrade python2-ipalibUpgrade pki-servlet-4.0-apiUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade pki-toolsUpgrade jackson-module-jaxb-annotationsUpgrade ipa-python-compatUpgrade jss-javadocUpgrade glassfish-fastinfosetUpgrade softhsmUpgrade python3-qrcode-coreUpgrade xsomUpgrade python3-jwcryptoUpgrade pki-caUpgrade ipa-client-commonUpgrade ipa-clientUpgrade xalan-j2Upgrade ipa-server-dns | Oct 7, 2020 | Feb 11, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Feb 11, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Feb 20, 2019 |
| Redhat_linux | — | Upgrade pki-core-debuginfoUpgrade pki-core-debugsourceUpgrade xml-commons-resolverUpgrade slf4j-jdk14Upgrade pki-symkeyUpgrade ipa-healthcheck-coreUpgrade custodiaUpgrade jss-debuginfoUpgrade python3-nssUpgrade apache-commons-collectionsUpgrade apache-commons-netUpgrade ipa-debugsourceUpgrade python2-ipaserverUpgrade relaxngDatatypeUpgrade glassfish-jaxb-coreUpgrade jss-debugsourceUpgrade jackson-jaxrs-providersUpgrade ipa-client-epnUpgrade python-nss-docUpgrade pki-caUpgrade python3-nss-debuginfoUpgrade opendnssec-debugsourceUpgrade jssUpgrade xsomUpgrade ipa-server-dnsUpgrade python3-qrcodeUpgrade python-nss-debugsourceUpgrade pki-servlet-4.0-apiUpgrade softhsm-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade python3-ipaclientUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-pyusbUpgrade slf4jUpgrade glassfish-jaxb-txw2Upgrade ipa-selinuxUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldapUpgrade pki-toolsUpgrade jackson-coreUpgrade softhsm-debuginfoUpgrade python3-kdcproxyUpgrade ipa-clientUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-healthcheckUpgrade javassistUpgrade python2-ipaclientUpgrade pki-serverUpgrade pki-base-javaUpgrade tomcatjssUpgrade opendnssecUpgrade python3-pkiNo solution existsUpgrade stax-exUpgrade jackson-jaxrs-json-providerUpgrade slapi-nis-debuginfoUpgrade python2-ipalibUpgrade python3-ipalibUpgrade ipa-debuginfoUpgrade pki-kraUpgrade ipa-server-trust-adUpgrade javassist-javadocUpgrade python3-custodiaUpgrade opendnssec-debuginfoUpgrade jackson-databindUpgrade xalan-j2Upgrade bea-stax-apiUpgrade ipa-serverUpgrade slapi-nisUpgrade python3-jwcryptoUpgrade ldapjdk-javadocUpgrade apache-commons-langUpgrade xerces-j2Upgrade python3-ipaserverUpgrade pki-tools-debuginfoUpgrade ipa-server-debuginfoUpgrade python3-yubicoUpgrade ipa-client-sambaUpgrade jss-javadocUpgrade jakarta-commons-httpclientUpgrade ipa-client-debuginfoUpgrade ipa-server-commonUpgrade velocityUpgrade ipa-client-commonUpgrade slapi-nis-debugsourceUpgrade ldapjdkUpgrade xmlstreambufferUpgrade softhsm-develUpgrade pki-baseUpgrade ipa-commonUpgrade jackson-annotationsUpgrade glassfish-fastinfosetUpgrade pki-servlet-engineUpgrade resteasyUpgrade python3-qrcode-coreUpgrade jackson-module-jaxb-annotationsUpgrade xml-commons-apisUpgrade pki-symkey-debuginfoUpgrade ipa-python-compatUpgrade glassfish-jaxb-apiUpgrade softhsm | Oct 1, 2020 | Feb 20, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Feb 20, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 20, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub