In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-custodiaUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade custodiaUpgrade python3-qrcode | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade drupal7Upgrade cacti | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade ipa-python-compat | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade ipa-clientUpgrade apache-commons-langUpgrade bea-stax-apiUpgrade pki-servlet-engineUpgrade python2-ipalibUpgrade python3-ipaserverUpgrade stax-exUpgrade python3-nssUpgrade ipa-client-sambaUpgrade jss-debuginfoUpgrade ipa-client-epnUpgrade ipa-commonUpgrade ipa-debugsourceUpgrade python-nss-docUpgrade opendnssec-debuginfoUpgrade ipa-serverUpgrade xml-commons-apisUpgrade jackson-module-jaxb-annotationsUpgrade ipa-healthcheckUpgrade python3-custodiaUpgrade velocityUpgrade python3-qrcodeUpgrade python2-ipaclientUpgrade bind-dyndb-ldap-debugsourceUpgrade slf4j-jdk14Upgrade jakarta-commons-httpclientUpgrade softhsm-develUpgrade python-nss-debugsourceUpgrade slf4jUpgrade pki-toolsUpgrade glassfish-jaxb-apiUpgrade jackson-annotationsUpgrade jackson-jaxrs-providersUpgrade softhsm-debuginfoUpgrade javassistUpgrade ldapjdk-javadocUpgrade ipa-server-dnsUpgrade python3-yubicoUpgrade ipa-selinuxUpgrade pki-symkey-debuginfoUpgrade resteasyUpgrade pki-kraUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade opendnssecUpgrade apache-commons-collectionsUpgrade custodiaUpgrade pki-symkeyUpgrade jackson-databindUpgrade tomcatjssUpgrade python3-nss-debuginfoUpgrade pki-caUpgrade glassfish-fastinfosetUpgrade softhsm-debugsourceUpgrade jackson-jaxrs-json-providerUpgrade ipa-server-debuginfoUpgrade pki-serverUpgrade pki-base-javaUpgrade pki-core-debugsourceUpgrade ipa-server-trust-adUpgrade xalan-j2Upgrade python3-qrcode-coreUpgrade pki-core-debuginfoUpgrade ipa-healthcheck-coreUpgrade relaxngDatatypeUpgrade python3-ipalibUpgrade softhsmUpgrade xsomUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-pkiUpgrade bind-dyndb-ldap-debuginfoUpgrade ldapjdkUpgrade slapi-nis-debuginfoUpgrade ipa-client-debuginfoUpgrade pki-servlet-4.0-apiUpgrade bind-dyndb-ldapUpgrade opendnssec-debugsourceUpgrade javassist-javadocUpgrade python3-jwcryptoUpgrade glassfish-jaxb-coreUpgrade xerces-j2Upgrade xmlstreambufferUpgrade xml-commons-resolverUpgrade python3-ipaclientUpgrade pki-baseUpgrade jss-javadocUpgrade jss-debugsourceUpgrade jssUpgrade jackson-coreUpgrade ipa-debuginfoUpgrade pki-tools-debuginfoUpgrade glassfish-jaxb-txw2Upgrade ipa-client-commonUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-netUpgrade python3-pyusbUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade python3-kdcproxyUpgrade python2-ipaserver | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade otrs2Upgrade node-jquery | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 7.70Upgrade to drupal version 8.7.1Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade cactiUpgrade gitlab-ce | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti.Upgrade net-analyzer/cacti-spine. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 32247800 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 32300397 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 32052261 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 32253037 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade ldapjdk-javadocUpgrade ipa-python-compatUpgrade jackson-module-jaxb-annotationsUpgrade custodiaUpgrade opendnssecUpgrade python3-pyusbUpgrade apache-commons-langUpgrade tomcatjssUpgrade ipa-clientUpgrade slf4jUpgrade jackson-annotationsUpgrade python3-ipaclientUpgrade pki-serverUpgrade pki-base-javaUpgrade javassistUpgrade softhsmUpgrade ipa-serverUpgrade ipa-server-commonUpgrade python2-ipalibUpgrade jackson-jaxrs-json-providerUpgrade xmlstreambufferUpgrade relaxngDatatypeUpgrade xsomUpgrade ipa-client-commonUpgrade pki-servlet-engineUpgrade xml-commons-resolverUpgrade ldapjdkUpgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade xerces-j2Upgrade glassfish-jaxb-coreUpgrade ipa-commonUpgrade xml-commons-apisUpgrade pki-toolsUpgrade python3-pkiUpgrade glassfish-jaxb-txw2Upgrade jackson-databindUpgrade xalan-j2Upgrade glassfish-fastinfosetUpgrade jakarta-commons-httpclientUpgrade python3-yubicoUpgrade bind-dyndb-ldapUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade apache-commons-netUpgrade softhsm-develUpgrade glassfish-jaxb-apiUpgrade ipa-client-sambaUpgrade javassist-javadocUpgrade jss-javadocUpgrade pki-servlet-4.0-apiUpgrade resteasyUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-adUpgrade ipa-selinuxUpgrade python3-nssUpgrade pki-kraUpgrade jackson-jaxrs-providersUpgrade ipa-server-dnsUpgrade ipa-healthcheckUpgrade slf4j-jdk14Upgrade ipa-client-epnUpgrade glassfish-jaxb-runtimeUpgrade velocityUpgrade slapi-nisUpgrade pki-baseUpgrade jackson-coreUpgrade python-nss-docUpgrade pki-caUpgrade python2-ipaserverUpgrade python3-qrcodeUpgrade jssUpgrade bea-stax-apiUpgrade python3-ipalibUpgrade python3-kdcproxyUpgrade python2-ipaclientUpgrade stax-exUpgrade pki-symkeyUpgrade apache-commons-collectionsUpgrade jquery-ui | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade pki-base-javaUpgrade javassistUpgrade glassfish-jaxb-apiUpgrade ipa-healthcheck-coreUpgrade javassist-javadocUpgrade slapi-nis-debugsourceUpgrade ipa-server-dnsUpgrade opendnssecUpgrade ipa-client-commonUpgrade python-nss-docUpgrade ipa-server-commonUpgrade python3-ipaclientUpgrade python3-nssUpgrade python3-custodiaUpgrade softhsm-debugsourceUpgrade ipa-debuginfoUpgrade python3-pyusbUpgrade jssUpgrade ipa-python-compatUpgrade opendnssec-debugsourceUpgrade pki-symkeyUpgrade xalan-j2Upgrade jakarta-commons-httpclientUpgrade pki-symkey-debuginfoUpgrade slf4jUpgrade stax-exNo solution existsUpgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade apache-commons-collectionsUpgrade velocityUpgrade ipa-debugsourceUpgrade python2-ipalibUpgrade ldapjdk-javadocUpgrade jss-debugsourceUpgrade python3-kdcproxyUpgrade pki-servlet-engineUpgrade glassfish-jaxb-coreUpgrade ipa-client-debuginfoUpgrade ipa-client-epnUpgrade python3-qrcode-coreUpgrade pki-toolsUpgrade jss-debuginfoUpgrade glassfish-fastinfosetUpgrade python3-qrcodeUpgrade bind-dyndb-ldapUpgrade softhsmUpgrade softhsm-develUpgrade xsomUpgrade pki-servlet-4.0-apiUpgrade jackson-coreUpgrade softhsm-debuginfoUpgrade python2-ipaserverUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade custodiaUpgrade python2-ipaclientUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-netUpgrade slapi-nis-debuginfoUpgrade ipa-selinuxUpgrade pki-serverUpgrade ipa-clientUpgrade pki-core-debuginfoUpgrade slf4j-jdk14Upgrade glassfish-jaxb-txw2Upgrade python3-ipaserverUpgrade jackson-module-jaxb-annotationsUpgrade xml-commons-apisUpgrade xerces-j2Upgrade pki-kraUpgrade ipa-commonUpgrade bind-dyndb-ldap-debuginfoUpgrade xml-commons-resolverUpgrade tomcatjssUpgrade ipa-healthcheckUpgrade jackson-databindUpgrade apache-commons-langUpgrade python3-jwcryptoUpgrade ipa-server-trust-adUpgrade relaxngDatatypeUpgrade ipa-server-debuginfoUpgrade pki-tools-debuginfoUpgrade jackson-annotationsUpgrade python3-yubicoUpgrade python3-ipalibUpgrade ldapjdkUpgrade pki-baseUpgrade resteasyUpgrade xmlstreambufferUpgrade pki-core-debugsourceUpgrade pki-caUpgrade opendnssec-debuginfoUpgrade jackson-jaxrs-providersUpgrade ipa-serverUpgrade python3-pkiUpgrade slapi-nisUpgrade jss-javadocUpgrade ipa-client-sambaUpgrade jackson-jaxrs-json-providerUpgrade bea-stax-api | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade otrsUpgrade otrs-docUpgrade cacti-spineUpgrade otrs-itsmUpgrade cacti | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade libjs-jquery (Ubuntu Pro)Upgrade drupal7 (Ubuntu Pro)Upgrade libjs-jquery | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub