In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade custodiaUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade python3-custodiaUpgrade python3-qrcode-core | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade cactiUpgrade drupal7 | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-debuginfoUpgrade python2-ipaserverUpgrade ipa-python-compatUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-server-common | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade ipa-healthcheck-coreUpgrade pki-core-debuginfoUpgrade pki-servlet-4.0-apiUpgrade ipa-server-commonUpgrade custodiaUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-pkiUpgrade tomcatjssUpgrade xerces-j2Upgrade xmlstreambufferUpgrade opendnssecUpgrade apache-commons-collectionsUpgrade apache-commons-netUpgrade jackson-databindUpgrade pki-symkeyUpgrade python2-ipaserverUpgrade glassfish-jaxb-runtimeUpgrade ipa-python-compatUpgrade ipa-client-commonUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade jackson-coreUpgrade ipa-debuginfoUpgrade jssUpgrade jss-debugsourceUpgrade pki-caUpgrade jss-javadocUpgrade pki-core-debugsourceUpgrade python3-ipaclientUpgrade ldapjdkUpgrade glassfish-jaxb-txw2Upgrade glassfish-fastinfosetUpgrade xsomUpgrade python3-ipalibUpgrade python3-jwcryptoUpgrade relaxngDatatypeUpgrade python3-kdcproxyUpgrade xml-commons-resolverUpgrade python3-nss-debuginfoUpgrade slapi-nis-debuginfoUpgrade pki-tools-debuginfoUpgrade pki-baseUpgrade opendnssec-debugsourceUpgrade softhsm-debugsourceUpgrade pki-serverUpgrade glassfish-jaxb-coreUpgrade bind-dyndb-ldapUpgrade ipa-server-debuginfoUpgrade softhsmUpgrade xalan-j2Upgrade ipa-server-trust-adUpgrade javassist-javadocUpgrade jackson-jaxrs-json-providerUpgrade pki-base-javaUpgrade ipa-client-debuginfoUpgrade python3-yubicoUpgrade slapi-nis-debugsourceUpgrade ipa-selinuxUpgrade python2-ipalibUpgrade python3-custodiaUpgrade slf4j-jdk14Upgrade pki-kraUpgrade velocityUpgrade softhsm-debuginfoUpgrade resteasyUpgrade javassistUpgrade stax-exUpgrade ipa-clientUpgrade jackson-annotationsUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade python-nss-debugsourceUpgrade python3-qrcodeUpgrade ipa-commonUpgrade slf4jUpgrade python3-ipaserverUpgrade apache-commons-langUpgrade python-nss-docUpgrade bea-stax-apiUpgrade jackson-module-jaxb-annotationsUpgrade ipa-serverUpgrade pki-toolsUpgrade jss-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-healthcheckUpgrade opendnssec-debuginfoUpgrade softhsm-develUpgrade python2-ipaclientUpgrade pki-symkey-debuginfoUpgrade ldapjdk-javadocUpgrade ipa-server-dnsUpgrade ipa-debugsourceUpgrade ipa-client-sambaUpgrade pki-servlet-engineUpgrade ipa-client-epnUpgrade xml-commons-apisUpgrade python3-nssUpgrade slapi-nis | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade node-jqueryUpgrade otrs2 | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 8.7.1Upgrade to drupal version 7.70Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade gitlab-ceUpgrade cactiUpgrade znc | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti.Upgrade net-analyzer/cacti-spine. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 32300397 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 32247800 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 32253037 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 32052261 for version 12.1.3.0.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade python3-nssUpgrade jackson-jaxrs-providersUpgrade pki-kraUpgrade ipa-server-dnsUpgrade jackson-coreUpgrade ipa-client-epnUpgrade ipa-healthcheckUpgrade velocityUpgrade slf4j-jdk14Upgrade python-nss-docUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-collectionsUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade python2-ipaclientUpgrade ipa-selinuxUpgrade jquery-uiUpgrade ipa-server-trust-adUpgrade jssUpgrade pki-caUpgrade python2-ipaserverUpgrade pki-symkeyUpgrade pki-baseUpgrade slapi-nisUpgrade bea-stax-apiUpgrade python3-kdcproxyUpgrade python3-ipalibUpgrade stax-exUpgrade softhsm-develUpgrade python3-jwcryptoUpgrade xmlstreambufferUpgrade glassfish-jaxb-coreUpgrade pki-servlet-engineUpgrade ldapjdkUpgrade ipa-commonUpgrade ipa-client-commonUpgrade glassfish-jaxb-txw2Upgrade python3-ipaserverUpgrade jakarta-commons-httpclientUpgrade xsomUpgrade xalan-j2Upgrade python2-ipalibUpgrade jackson-databindUpgrade relaxngDatatypeUpgrade jackson-module-jaxb-annotationsUpgrade jackson-annotationsUpgrade glassfish-jaxb-apiUpgrade resteasyUpgrade python3-qrcode-coreUpgrade pki-servlet-4.0-apiUpgrade javassist-javadocUpgrade ipa-client-sambaUpgrade jss-javadocUpgrade glassfish-fastinfosetUpgrade custodiaUpgrade python3-pkiUpgrade bind-dyndb-ldapUpgrade xml-commons-apisUpgrade xerces-j2Upgrade python3-yubicoUpgrade python3-custodiaUpgrade xml-commons-resolverUpgrade python3-ipaclientUpgrade opendnssecUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade softhsmUpgrade ipa-server-commonUpgrade ipa-clientUpgrade pki-toolsUpgrade javassistUpgrade jackson-jaxrs-json-providerUpgrade slf4jUpgrade pki-base-javaUpgrade ipa-serverUpgrade tomcatjssUpgrade pki-serverUpgrade apache-commons-langUpgrade apache-commons-netUpgrade ldapjdk-javadoc | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade resteasyUpgrade pki-core-debugsourceUpgrade jackson-annotationsUpgrade opendnssec-debuginfoUpgrade pki-core-debuginfoUpgrade apache-commons-netUpgrade bind-dyndb-ldap-debugsourceUpgrade relaxngDatatypeUpgrade pki-serverUpgrade jackson-module-jaxb-annotationsUpgrade tomcatjssUpgrade glassfish-jaxb-txw2Upgrade pki-kraUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-selinuxUpgrade python2-ipaserverUpgrade xmlstreambufferUpgrade ipa-clientUpgrade slf4j-jdk14Upgrade glassfish-jaxb-runtimeUpgrade slapi-nis-debuginfoUpgrade apache-commons-langUpgrade python2-ipaclientUpgrade pki-baseUpgrade jackson-coreUpgrade jackson-databindUpgrade jss-javadocUpgrade pki-servlet-4.0-apiUpgrade python3-ipalibUpgrade pki-caUpgrade pki-tools-debuginfoUpgrade softhsm-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade python3-pkiUpgrade slapi-nisUpgrade python3-yubicoUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade custodiaUpgrade ldapjdkUpgrade python3-jwcryptoUpgrade ipa-serverUpgrade python3-ipaserverUpgrade jackson-jaxrs-providersUpgrade ipa-client-sambaUpgrade ipa-server-trust-adUpgrade bea-stax-apiUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-healthcheckUpgrade ipa-server-debuginfoUpgrade xml-commons-apisUpgrade ipa-commonUpgrade slf4jUpgrade python3-nss-debuginfoUpgrade python3-qrcodeUpgrade ipa-server-dnsUpgrade python-nss-debugsourceUpgrade glassfish-jaxb-coreUpgrade opendnssec-debugsourceUpgrade python3-kdcproxyUpgrade pki-servlet-engineUpgrade ipa-client-debuginfoUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade jss-debuginfoUpgrade jssUpgrade bind-dyndb-ldapUpgrade glassfish-fastinfosetUpgrade ipa-server-commonUpgrade softhsmUpgrade softhsm-debugsourceUpgrade glassfish-jaxb-apiUpgrade ipa-healthcheck-coreUpgrade jakarta-commons-httpclientUpgrade pki-symkeyUpgrade velocityUpgrade xalan-j2Upgrade pki-symkey-debuginfoUpgrade opendnssecUpgrade python3-ipaclientUpgrade python3-pyusbUpgrade ipa-client-commonUpgrade softhsm-develNo solution existsUpgrade ldapjdk-javadocUpgrade jss-debugsourceUpgrade pki-base-javaUpgrade javassistUpgrade python3-nssUpgrade ipa-debugsourceUpgrade ipa-client-epnUpgrade python-nss-docUpgrade slapi-nis-debugsourceUpgrade apache-commons-collectionsUpgrade stax-exUpgrade ipa-debuginfoUpgrade javassist-javadocUpgrade xsomUpgrade pki-tools | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade otrs-docUpgrade cacti-spineUpgrade otrsUpgrade otrs-itsmUpgrade cacti | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade drupal7 (Ubuntu Pro)Upgrade libjs-jqueryUpgrade libjs-jquery (Ubuntu Pro) | Jan 31, 2025 | Apr 29, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub