In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade python3-jwcryptoUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade custodia | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade drupal7Upgrade cacti | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-commonUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade ipa-server-trust-adUpgrade ipa-serverUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade ipa-server-dns | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade pki-servlet-engineUpgrade python3-ipaserverUpgrade apache-commons-langUpgrade velocityUpgrade ipa-clientUpgrade jackson-module-jaxb-annotationsUpgrade python3-nssUpgrade slf4j-jdk14Upgrade ipa-client-epnUpgrade pki-kraUpgrade ipa-client-sambaUpgrade ipa-commonUpgrade python-nss-docUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade resteasyUpgrade ipa-selinuxUpgrade javassistUpgrade bea-stax-apiUpgrade python3-custodiaUpgrade slapi-nis-debugsourceUpgrade ldapjdk-javadocUpgrade pki-symkey-debuginfoUpgrade python3-yubicoUpgrade slapi-nisUpgrade softhsm-develUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade opendnssec-debuginfoUpgrade jackson-annotationsUpgrade softhsm-debuginfoUpgrade python-nss-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade slf4jUpgrade jss-debuginfoUpgrade jakarta-commons-httpclientUpgrade pki-toolsUpgrade ipa-debugsourceUpgrade ipa-healthcheckUpgrade python2-ipalibUpgrade stax-exUpgrade python2-ipaclientUpgrade python3-qrcodeUpgrade xml-commons-apisUpgrade jackson-databindUpgrade ipa-python-compatUpgrade glassfish-jaxb-runtimeUpgrade python3-pyusbUpgrade pki-symkeyUpgrade apache-commons-netUpgrade python3-kdcproxyUpgrade ipa-client-commonUpgrade glassfish-fastinfosetUpgrade pki-caUpgrade pki-core-debugsourceUpgrade ipa-server-trust-adUpgrade xalan-j2Upgrade python3-qrcode-coreUpgrade pki-baseUpgrade pki-tools-debuginfoUpgrade jss-javadocUpgrade jss-debugsourceUpgrade jssUpgrade jackson-coreUpgrade ipa-debuginfoUpgrade glassfish-jaxb-txw2Upgrade opendnssec-debugsourceUpgrade pki-base-javaUpgrade javassist-javadocUpgrade jackson-jaxrs-json-providerUpgrade ipa-server-debuginfoUpgrade glassfish-jaxb-coreUpgrade bind-dyndb-ldapUpgrade pki-serverUpgrade ipa-server-commonUpgrade python2-ipaserverUpgrade python3-jwcryptoUpgrade ldapjdkUpgrade slapi-nis-debuginfoUpgrade python3-nss-debuginfoUpgrade xsomUpgrade softhsm-debugsourceUpgrade ipa-client-debuginfoUpgrade softhsmUpgrade ipa-server-trust-ad-debuginfoUpgrade relaxngDatatypeUpgrade python3-pkiUpgrade python3-ipalibUpgrade pki-core-debuginfoUpgrade ipa-healthcheck-coreUpgrade bind-dyndb-ldap-debuginfoUpgrade custodiaUpgrade apache-commons-collectionsUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade opendnssecUpgrade xerces-j2Upgrade tomcatjssUpgrade xml-commons-resolverUpgrade python3-ipaclient | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade otrs2Upgrade node-jquery | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 7.70Upgrade to drupal version 8.7.1Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade cactiUpgrade gitlab-ce | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti-spine.Upgrade net-analyzer/cacti. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 32253037 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 32052261 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 32247800 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 32300397 for version 12.2.1.3.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade ipa-selinuxUpgrade velocityUpgrade jssUpgrade python3-kdcproxyUpgrade ipa-server-dnsUpgrade python3-nssUpgrade ipa-healthcheckUpgrade python2-ipaclientUpgrade pki-symkeyUpgrade apache-commons-collectionsUpgrade jquery-uiUpgrade slf4j-jdk14Upgrade ipa-server-trust-adUpgrade stax-exUpgrade jackson-jaxrs-providersUpgrade pki-caUpgrade python-nss-docUpgrade ipa-client-epnUpgrade ipa-healthcheck-coreUpgrade pki-kraUpgrade python3-ipalibUpgrade slapi-nisUpgrade python2-ipaserverUpgrade pki-baseUpgrade bea-stax-apiUpgrade python3-qrcodeUpgrade jackson-coreUpgrade glassfish-jaxb-runtimeUpgrade jss-javadocUpgrade pki-servlet-engineUpgrade python3-custodiaUpgrade ipa-client-sambaUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade ldapjdkUpgrade ipa-commonUpgrade ipa-client-commonUpgrade softhsm-develUpgrade glassfish-jaxb-coreUpgrade xmlstreambufferUpgrade pki-toolsUpgrade javassistUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade bind-dyndb-ldapUpgrade xml-commons-resolverUpgrade xml-commons-apisUpgrade xerces-j2Upgrade python3-yubicoUpgrade python3-pkiUpgrade python3-ipaclientUpgrade opendnssecUpgrade jackson-module-jaxb-annotationsUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade pki-servlet-4.0-apiUpgrade python3-qrcode-coreUpgrade softhsmUpgrade slf4jUpgrade pki-base-javaUpgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-clientUpgrade resteasyUpgrade javassist-javadocUpgrade glassfish-fastinfosetUpgrade tomcatjssUpgrade jackson-annotationsUpgrade apache-commons-langUpgrade custodiaUpgrade jackson-databindUpgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-txw2Upgrade relaxngDatatypeUpgrade xsomUpgrade xalan-j2Upgrade apache-commons-netUpgrade python2-ipalib | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade ipa-debugsourceUpgrade ipa-client-commonUpgrade pki-symkeyUpgrade xalan-j2Upgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade jakarta-commons-httpclientUpgrade softhsmUpgrade pki-symkey-debuginfoUpgrade xsomUpgrade apache-commons-collectionsUpgrade python-nss-debugsourceUpgrade ipa-client-epnUpgrade softhsm-develUpgrade jss-debugsourceUpgrade javassist-javadocUpgrade ipa-debuginfoUpgrade javassistUpgrade python3-ipaclientUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade ldapjdk-javadocUpgrade python3-pyusbUpgrade opendnssec-debugsourceUpgrade softhsm-debugsourceUpgrade python3-custodiaUpgrade python3-nssUpgrade ipa-python-compatUpgrade velocityUpgrade ipa-client-debuginfoUpgrade ipa-server-commonUpgrade opendnssecUpgrade ipa-server-dnsUpgrade pki-toolsUpgrade pki-servlet-engineUpgrade jssUpgrade python3-qrcode-coreUpgrade jss-debuginfoUpgrade slf4jUpgrade slapi-nis-debugsourceUpgrade python3-kdcproxyUpgrade pki-base-javaUpgrade python2-ipalibUpgrade glassfish-jaxb-coreNo solution existsUpgrade stax-exUpgrade python3-qrcodeUpgrade bind-dyndb-ldapUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-adUpgrade ldapjdkUpgrade ipa-healthcheckUpgrade apache-commons-langUpgrade ipa-server-debuginfoUpgrade python3-ipalibUpgrade xmlstreambufferUpgrade python2-ipaserverUpgrade jackson-jaxrs-json-providerUpgrade xerces-j2Upgrade resteasyUpgrade slapi-nisUpgrade bind-dyndb-ldap-debuginfoUpgrade python2-ipaclientUpgrade xml-commons-apisUpgrade python3-ipaserverUpgrade custodiaUpgrade ipa-commonUpgrade xml-commons-resolverUpgrade python3-yubicoUpgrade jackson-databindUpgrade jss-javadocUpgrade pki-core-debugsourceUpgrade jackson-jaxrs-providersUpgrade opendnssec-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade pki-caUpgrade slapi-nis-debuginfoUpgrade ipa-selinuxUpgrade glassfish-jaxb-txw2Upgrade pki-kraUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-serverUpgrade relaxngDatatypeUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-netUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-client-sambaUpgrade bea-stax-apiUpgrade softhsm-debuginfoUpgrade ipa-clientUpgrade slf4j-jdk14Upgrade pki-core-debuginfoUpgrade ipa-serverUpgrade python3-pkiUpgrade jackson-coreUpgrade pki-servlet-4.0-apiUpgrade python3-jwcryptoUpgrade pki-tools-debuginfoUpgrade pki-baseUpgrade tomcatjssUpgrade jackson-annotations | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade otrs-docUpgrade cacti-spineUpgrade otrsUpgrade otrs-itsmUpgrade cacti | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade libjs-jquery (Ubuntu Pro)Upgrade drupal7 (Ubuntu Pro)Upgrade libjs-jquery | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub