In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade python3-yubico | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade drupal7Upgrade cacti | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade ipa-clientUpgrade python2-ipaserverUpgrade ipa-commonUpgrade ipa-server-commonUpgrade python2-ipaclientUpgrade ipa-serverUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade ipa-debuginfoUpgrade ipa-server-trust-ad | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade python3-nssUpgrade ipa-client-epnUpgrade ipa-commonUpgrade ipa-client-sambaUpgrade python3-ipaserverUpgrade glassfish-jaxb-apiUpgrade pki-servlet-engineUpgrade python-nss-debugsourceUpgrade softhsm-develUpgrade python3-qrcodeUpgrade jakarta-commons-httpclientUpgrade slf4jUpgrade jackson-jaxrs-providersUpgrade pki-symkey-debuginfoUpgrade xml-commons-apisUpgrade python2-ipalibUpgrade ipa-server-dnsUpgrade softhsm-debuginfoUpgrade jackson-annotationsUpgrade stax-exUpgrade python2-ipaclientUpgrade velocityUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-docUpgrade python3-custodiaUpgrade ipa-selinuxUpgrade ipa-serverUpgrade javassistUpgrade ipa-clientUpgrade ldapjdk-javadocUpgrade ipa-debugsourceUpgrade apache-commons-langUpgrade bea-stax-apiUpgrade python3-yubicoUpgrade pki-kraUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade slf4j-jdk14Upgrade resteasyUpgrade bind-dyndb-ldap-debugsourceUpgrade jss-debuginfoUpgrade pki-toolsUpgrade opendnssec-debuginfoUpgrade ipa-healthcheckUpgrade ipa-healthcheck-coreUpgrade slapi-nis-debuginfoUpgrade softhsm-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-netUpgrade softhsmUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-debuginfoUpgrade xsomUpgrade ipa-server-trust-adUpgrade xml-commons-resolverUpgrade apache-commons-collectionsUpgrade opendnssec-debugsourceUpgrade pki-base-javaUpgrade javassist-javadocUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-coreUpgrade bind-dyndb-ldapUpgrade pki-serverUpgrade ipa-server-debuginfoUpgrade python3-jwcryptoUpgrade pki-caUpgrade ldapjdkUpgrade pki-core-debugsourceUpgrade xalan-j2Upgrade python3-qrcode-coreUpgrade bind-dyndb-ldap-debuginfoUpgrade relaxngDatatypeUpgrade pki-core-debuginfoUpgrade python3-pkiUpgrade python3-ipalibUpgrade xerces-j2Upgrade glassfish-fastinfosetUpgrade python3-nss-debuginfoUpgrade xmlstreambufferUpgrade python3-ipaclientUpgrade tomcatjssUpgrade opendnssecUpgrade pki-servlet-4.0-apiUpgrade custodiaUpgrade glassfish-jaxb-txw2Upgrade pki-tools-debuginfoUpgrade pki-baseUpgrade jss-javadocUpgrade jss-debugsourceUpgrade jssUpgrade jackson-coreUpgrade ipa-debuginfoUpgrade ipa-server-commonUpgrade pki-symkeyUpgrade python2-ipaserverUpgrade python3-kdcproxyUpgrade ipa-client-commonUpgrade python3-pyusbUpgrade jackson-databindUpgrade ipa-python-compat | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade node-jqueryUpgrade otrs2 | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 7.70Upgrade to drupal version 8.7.1Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade zncUpgrade gitlab-ceUpgrade cacti | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti-spine.Upgrade net-analyzer/cacti. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 32300397 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 32247800 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 32052261 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 32253037 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade ldapjdkUpgrade ldapjdk-javadocUpgrade pki-servlet-engineUpgrade softhsm-develUpgrade jackson-module-jaxb-annotationsUpgrade opendnssecUpgrade custodiaUpgrade glassfish-jaxb-coreUpgrade pki-serverUpgrade python3-ipaclientUpgrade python3-pyusbUpgrade ipa-client-commonUpgrade ipa-python-compatUpgrade ipa-commonUpgrade jackson-annotationsUpgrade jss-javadocUpgrade javassist-javadocUpgrade jakarta-commons-httpclientUpgrade pki-toolsUpgrade jackson-databindUpgrade python3-ipaserverUpgrade glassfish-jaxb-txw2Upgrade python2-ipalibUpgrade softhsmUpgrade tomcatjssUpgrade slf4jUpgrade python3-pkiUpgrade pki-base-javaUpgrade apache-commons-netUpgrade relaxngDatatypeUpgrade resteasyUpgrade pki-servlet-4.0-apiUpgrade python3-qrcode-coreUpgrade ipa-clientUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade ipa-client-sambaUpgrade ipa-serverUpgrade jackson-jaxrs-json-providerUpgrade xmlstreambufferUpgrade apache-commons-langUpgrade bind-dyndb-ldapUpgrade ipa-server-commonUpgrade xalan-j2Upgrade javassistUpgrade xerces-j2Upgrade xml-commons-apisUpgrade python3-yubicoUpgrade xml-commons-resolverUpgrade xsomUpgrade python3-custodiaUpgrade python3-jwcryptoUpgrade pki-symkeyUpgrade stax-exUpgrade jquery-uiUpgrade ipa-server-trust-adUpgrade slf4j-jdk14Upgrade ipa-healthcheck-coreUpgrade ipa-client-epnUpgrade glassfish-jaxb-runtimeUpgrade python3-ipalibUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade slapi-nisUpgrade python2-ipaclientUpgrade jackson-coreUpgrade pki-baseUpgrade jssUpgrade python2-ipaserverUpgrade python-nss-docUpgrade velocityUpgrade pki-caUpgrade ipa-healthcheckUpgrade jackson-jaxrs-providersUpgrade ipa-server-dnsUpgrade python3-nssUpgrade pki-kraUpgrade bea-stax-apiUpgrade ipa-selinuxUpgrade apache-commons-collections | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade python3-qrcodeUpgrade softhsm-debugsourceUpgrade glassfish-jaxb-apiUpgrade jssUpgrade ipa-debugsourceNo solution existsUpgrade javassistUpgrade jss-debuginfoUpgrade slapi-nis-debugsourceUpgrade ipa-python-compatUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-coreUpgrade bind-dyndb-ldapUpgrade python3-nssUpgrade javassist-javadocUpgrade softhsm-develUpgrade xsomUpgrade pki-servlet-engineUpgrade pki-toolsUpgrade python-nss-debugsourceUpgrade ipa-server-dnsUpgrade ipa-client-epnUpgrade softhsmUpgrade velocityUpgrade pki-symkey-debuginfoUpgrade stax-exUpgrade ipa-healthcheck-coreUpgrade ipa-server-commonUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade python3-nss-debuginfoUpgrade opendnssec-debugsourceUpgrade apache-commons-collectionsUpgrade slf4jUpgrade python-nss-docUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade python3-ipaclientUpgrade python3-custodiaUpgrade python3-pyusbUpgrade opendnssecUpgrade xalan-j2Upgrade pki-symkeyUpgrade jakarta-commons-httpclientUpgrade glassfish-fastinfosetUpgrade jss-debugsourceUpgrade pki-base-javaUpgrade ipa-client-debuginfoUpgrade python2-ipalibUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-jwcryptoUpgrade xerces-j2Upgrade python3-yubicoUpgrade apache-commons-langUpgrade jackson-databindUpgrade tomcatjssUpgrade xml-commons-resolverUpgrade pki-servlet-4.0-apiUpgrade ipa-serverUpgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-json-providerUpgrade slapi-nisUpgrade opendnssec-debuginfoUpgrade pki-tools-debuginfoUpgrade softhsm-debuginfoUpgrade glassfish-jaxb-txw2Upgrade jackson-jaxrs-providersUpgrade pki-core-debuginfoUpgrade jackson-coreUpgrade ipa-commonUpgrade pki-core-debugsourceUpgrade jss-javadocUpgrade python2-ipaserverUpgrade resteasyUpgrade xmlstreambufferUpgrade ipa-clientUpgrade jackson-annotationsUpgrade pki-caUpgrade ipa-selinuxUpgrade custodiaUpgrade ipa-server-debuginfoUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade ldapjdkUpgrade python3-pkiUpgrade ipa-client-sambaUpgrade bea-stax-apiUpgrade ipa-healthcheckUpgrade pki-baseUpgrade xml-commons-apisUpgrade relaxngDatatypeUpgrade jackson-module-jaxb-annotationsUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-serverUpgrade bind-dyndb-ldap-debugsourceUpgrade slf4j-jdk14Upgrade slapi-nis-debuginfoUpgrade python2-ipaclientUpgrade python3-ipaserverUpgrade apache-commons-netUpgrade pki-kra | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade otrsUpgrade cacti-spineUpgrade otrs-docUpgrade cactiUpgrade otrs-itsm | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade libjs-jqueryUpgrade drupal7 (Ubuntu Pro)Upgrade libjs-jquery (Ubuntu Pro) | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub