In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-pyusbUpgrade python3-yubicoUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade custodiaUpgrade python3-kdcproxyUpgrade python3-qrcode | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade drupal7Upgrade cacti | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade python2-ipaserverUpgrade ipa-serverUpgrade python2-ipaclientUpgrade ipa-server-trust-ad | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade jss-debuginfoUpgrade pki-toolsUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-client-epnUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade opendnssec-debuginfoUpgrade python3-ipaserverUpgrade pki-servlet-engineUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-docUpgrade ipa-clientUpgrade ipa-debugsourceUpgrade jackson-annotationsUpgrade apache-commons-langUpgrade ipa-client-sambaUpgrade python-nss-debugsourceUpgrade jackson-jaxrs-providersUpgrade bea-stax-apiUpgrade ipa-serverUpgrade python3-nssUpgrade jakarta-commons-httpclientUpgrade slf4jUpgrade softhsm-develUpgrade slf4j-jdk14Upgrade resteasyUpgrade python3-yubicoUpgrade ipa-server-dnsUpgrade pki-symkey-debuginfoUpgrade pki-kraUpgrade softhsm-debuginfoUpgrade ipa-selinuxUpgrade javassistUpgrade python3-custodiaUpgrade xml-commons-apisUpgrade python2-ipaclientUpgrade stax-exUpgrade python2-ipalibUpgrade velocityUpgrade python3-qrcodeUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade glassfish-jaxb-apiUpgrade ldapjdk-javadocUpgrade xml-commons-resolverUpgrade pki-baseUpgrade jss-javadocUpgrade opendnssecUpgrade tomcatjssUpgrade jss-debugsourceUpgrade ipa-debuginfoUpgrade glassfish-jaxb-txw2Upgrade jackson-coreUpgrade pki-core-debugsourceUpgrade python3-qrcode-coreUpgrade ipa-server-trust-adUpgrade xalan-j2Upgrade python3-jwcryptoUpgrade pki-caUpgrade slapi-nis-debuginfoUpgrade ipa-healthcheck-coreUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-pkiUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade jackson-databindUpgrade ipa-python-compatUpgrade pki-symkeyUpgrade python2-ipaserverUpgrade python3-ipalibUpgrade ldapjdkUpgrade glassfish-fastinfosetUpgrade python3-nss-debuginfoUpgrade relaxngDatatypeUpgrade pki-core-debuginfoUpgrade pki-tools-debuginfoUpgrade jssUpgrade apache-commons-netUpgrade xsomUpgrade xerces-j2Upgrade python3-ipaclientUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-debuginfoUpgrade softhsm-debugsourceUpgrade softhsmUpgrade glassfish-jaxb-runtimeUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade pki-serverUpgrade opendnssec-debugsourceUpgrade pki-base-javaUpgrade javassist-javadocUpgrade jackson-jaxrs-json-providerUpgrade ipa-server-debuginfoUpgrade bind-dyndb-ldapUpgrade glassfish-jaxb-coreUpgrade pki-servlet-4.0-apiUpgrade apache-commons-collectionsUpgrade custodiaUpgrade xmlstreambuffer | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade node-jqueryUpgrade otrs2 | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 8.7.1Upgrade to drupal version 7.70Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade cactiUpgrade gitlab-ce | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti-spine.Upgrade net-analyzer/cacti. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 32253037 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 32052261 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 32247800 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 32300397 for version 12.2.1.3.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade pki-caUpgrade python2-ipaserverUpgrade python-nss-docUpgrade python3-qrcodeUpgrade slapi-nisUpgrade python3-nssUpgrade jssUpgrade ipa-healthcheck-coreUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade ipa-healthcheckUpgrade stax-exUpgrade glassfish-jaxb-runtimeUpgrade ipa-client-epnUpgrade ipa-server-dnsUpgrade velocityUpgrade jackson-coreUpgrade python3-kdcproxyUpgrade ipa-server-trust-adUpgrade pki-kraUpgrade pki-baseUpgrade python3-ipalibUpgrade bea-stax-apiUpgrade jquery-uiUpgrade ipa-selinuxUpgrade python2-ipaclientUpgrade apache-commons-collectionsUpgrade pki-symkeyUpgrade javassistUpgrade custodiaUpgrade jackson-jaxrs-json-providerUpgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade python3-pyusbUpgrade pki-serverUpgrade python3-ipaclientUpgrade opendnssecUpgrade jackson-module-jaxb-annotationsUpgrade ipa-python-compatUpgrade resteasyUpgrade pki-servlet-4.0-apiUpgrade jss-javadocUpgrade javassist-javadocUpgrade ipa-client-sambaUpgrade glassfish-jaxb-apiUpgrade python3-qrcode-coreUpgrade glassfish-fastinfosetUpgrade python3-pkiUpgrade jackson-annotationsUpgrade xmlstreambufferUpgrade xml-commons-resolverUpgrade xml-commons-apisUpgrade xerces-j2Upgrade python3-yubicoUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-txw2Upgrade python3-ipaserverUpgrade apache-commons-netUpgrade ipa-serverUpgrade softhsmUpgrade pki-base-javaUpgrade ipa-clientUpgrade apache-commons-langUpgrade ipa-server-commonUpgrade tomcatjssUpgrade xsomUpgrade relaxngDatatypeUpgrade python2-ipalibUpgrade jackson-databindUpgrade pki-toolsUpgrade xalan-j2Upgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade ldapjdkUpgrade softhsm-develUpgrade pki-servlet-engineUpgrade ipa-commonUpgrade ipa-client-commonUpgrade python3-jwcryptoUpgrade slf4j | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade softhsmUpgrade python-nss-debugsourceUpgrade pki-toolsUpgrade python3-pyusbUpgrade opendnssecNo solution existsUpgrade stax-exUpgrade pki-symkeyUpgrade pki-servlet-engineUpgrade velocityUpgrade apache-commons-collectionsUpgrade python3-kdcproxyUpgrade glassfish-jaxb-coreUpgrade javassistUpgrade ipa-client-epnUpgrade python3-nssUpgrade jss-debugsourceUpgrade python3-nss-debuginfoUpgrade jssUpgrade ipa-debugsourceUpgrade bind-dyndb-ldapUpgrade pki-base-javaUpgrade python2-ipalibUpgrade ipa-client-debuginfoUpgrade ldapjdk-javadocUpgrade python3-custodiaUpgrade opendnssec-debugsourceUpgrade jss-debuginfoUpgrade jakarta-commons-httpclientUpgrade python3-ipaclientUpgrade ipa-debuginfoUpgrade glassfish-fastinfosetUpgrade xsomUpgrade javassist-javadocUpgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade softhsm-develUpgrade python-nss-docUpgrade slf4jUpgrade softhsm-debugsourceUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade xalan-j2Upgrade slapi-nis-debugsourceUpgrade glassfish-jaxb-apiUpgrade ipa-server-commonUpgrade pki-symkey-debuginfoUpgrade ipa-python-compatUpgrade python3-qrcode-coreUpgrade jackson-module-jaxb-annotationsUpgrade bind-dyndb-ldap-debuginfoUpgrade jackson-jaxrs-providersUpgrade ipa-serverUpgrade pki-kraUpgrade slf4j-jdk14Upgrade bind-dyndb-ldap-debugsourceUpgrade apache-commons-netUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade ipa-commonUpgrade xerces-j2Upgrade softhsm-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade slapi-nisUpgrade pki-caUpgrade bea-stax-apiUpgrade jackson-coreUpgrade jss-javadocUpgrade ipa-server-trust-ad-debuginfoUpgrade glassfish-jaxb-txw2Upgrade pki-serverUpgrade slapi-nis-debuginfoUpgrade relaxngDatatypeUpgrade pki-core-debuginfoUpgrade xmlstreambufferUpgrade python2-ipaserverUpgrade glassfish-jaxb-runtimeUpgrade pki-tools-debuginfoUpgrade pki-core-debugsourceUpgrade opendnssec-debuginfoUpgrade python3-jwcryptoUpgrade python3-pkiUpgrade ipa-clientUpgrade jackson-annotationsUpgrade python2-ipaclientUpgrade resteasyUpgrade pki-servlet-4.0-apiUpgrade ipa-healthcheckUpgrade ldapjdkUpgrade pki-baseUpgrade python3-yubicoUpgrade ipa-server-trust-adUpgrade apache-commons-langUpgrade ipa-server-debuginfoUpgrade tomcatjssUpgrade python3-ipalibUpgrade xml-commons-resolverUpgrade jackson-databindUpgrade custodiaUpgrade python3-ipaserverUpgrade xml-commons-apis | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade cactiUpgrade otrs-itsmUpgrade cacti-spineUpgrade otrs-docUpgrade otrs | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade libjs-jquery (Ubuntu Pro)Upgrade drupal7 (Ubuntu Pro)Upgrade libjs-jquery | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub