A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade apache-commons-netUpgrade glassfish-jaxb-txw2Upgrade glassfish-fastinfosetUpgrade javassistUpgrade xalan-j2Upgrade javassist-javadocUpgrade apache-commons-collectionsUpgrade bea-stax-apiUpgrade glassfish-jaxb-apiUpgrade pki-servlet-engineUpgrade slf4j-jdk14Upgrade stax-exUpgrade jackson-annotationsUpgrade apache-commons-langUpgrade jackson-coreUpgrade xml-commons-apisUpgrade resteasyUpgrade python3-nssUpgrade xsomUpgrade jackson-jaxrs-providersUpgrade xml-commons-resolverUpgrade jackson-databindUpgrade slf4jUpgrade jackson-module-jaxb-annotationsUpgrade xerces-j2Upgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade jackson-jaxrs-json-providerUpgrade pki-servlet-4.0-apiUpgrade velocityUpgrade python-nss-doc | May 4, 2022 | Apr 30, 2021 |
| Amazon Linux Ami 2 | — | Upgrade pki-core-debuginfoUpgrade pki-baseUpgrade pki-caUpgrade pki-toolsUpgrade pki-kraUpgrade pki-symkeyUpgrade pki-javadocUpgrade pki-base-javaUpgrade pki-server | Apr 23, 2021 | Apr 23, 2021 |
| Centos_linux | — | Upgrade pki-servlet-engineUpgrade xmlstreambufferUpgrade xerces-j2Upgrade pki-kraUpgrade pki-symkeyUpgrade apache-commons-collectionsUpgrade velocityUpgrade stax-exUpgrade pki-javadocUpgrade pki-tools-debuginfoUpgrade python3-nssUpgrade jss-debuginfoUpgrade jackson-databindUpgrade ldapjdkUpgrade python-nss-docUpgrade slf4j-jdk14Upgrade glassfish-jaxb-runtimeUpgrade bea-stax-apiUpgrade jackson-coreUpgrade jackson-jaxrs-json-providerUpgrade pki-symkey-debuginfoUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade jssUpgrade python-nss-debugsourceUpgrade pki-core-debugsourceUpgrade pki-caUpgrade pki-core-debuginfoUpgrade javassist-javadocUpgrade slf4jUpgrade jss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade jss-javadocUpgrade pki-toolsUpgrade python3-nss-debuginfoUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade jakarta-commons-httpclientUpgrade apache-commons-langUpgrade tomcatjssUpgrade xsomUpgrade xml-commons-apisUpgrade pki-servlet-4.0-apiUpgrade relaxngDatatypeUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-coreUpgrade javassistUpgrade python3-pkiUpgrade apache-commons-netUpgrade resteasyUpgrade glassfish-jaxb-txw2Upgrade xml-commons-resolverUpgrade pki-base-javaUpgrade pki-baseUpgrade jackson-annotationsUpgrade xalan-j2 | Nov 5, 2020 | Nov 3, 2020 |
| Debian | — | Upgrade dogtag-pki | Jul 30, 2024 | Apr 30, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pki-baseUpgrade pki-serverUpgrade pki-toolsUpgrade pki-kraUpgrade pki-symkeyUpgrade pki-ca | Feb 22, 2021 | Oct 30, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-toolsUpgrade pki-baseUpgrade pki-serverUpgrade pki-base-javaUpgrade pki-kraUpgrade pki-caUpgrade pki-symkey | Apr 30, 2021 | Oct 30, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-base-javaUpgrade pki-kraUpgrade pki-serverUpgrade pki-baseUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-ca | Nov 2, 2020 | Oct 30, 2020 |
| Oracle_linux | — | Upgrade pki-serverUpgrade tomcatjssUpgrade python3-pkiUpgrade pki-servlet-engineUpgrade velocityUpgrade relaxngDatatypeUpgrade xerces-j2Upgrade jss-javadocUpgrade pki-javadocUpgrade ldapjdk-javadocUpgrade xml-commons-apisUpgrade xalan-j2Upgrade glassfish-jaxb-coreUpgrade javassist-javadocUpgrade javassistUpgrade stax-exUpgrade resteasyUpgrade pki-base-javaUpgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade jackson-annotationsUpgrade jakarta-commons-httpclientUpgrade glassfish-fastinfosetUpgrade ldapjdkUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-langUpgrade xmlstreambufferUpgrade apache-commons-collectionsUpgrade pki-kraUpgrade slf4jUpgrade glassfish-jaxb-runtimeUpgrade python-nss-docUpgrade pki-baseUpgrade pki-caUpgrade pki-toolsUpgrade xml-commons-resolverUpgrade jackson-jaxrs-json-providerUpgrade python3-nssUpgrade jackson-databindUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-txw2Upgrade jssUpgrade apache-commons-netUpgrade pki-servlet-4.0-apiUpgrade xsomUpgrade slf4j-jdk14Upgrade pki-symkeyUpgrade jackson-core | Mar 18, 2021 | Feb 3, 2020 |
| Redhat_linux | — | Upgrade velocityUpgrade pki-baseUpgrade glassfish-jaxb-txw2Upgrade apache-commons-collectionsUpgrade jss-debuginfoUpgrade apache-commons-netUpgrade bea-stax-apiUpgrade xml-commons-resolverUpgrade jakarta-commons-httpclientUpgrade pki-tools-debuginfoUpgrade python3-nssUpgrade javassist-javadocUpgrade ldapjdk-javadocUpgrade pki-caUpgrade pki-symkeyUpgrade jssUpgrade glassfish-jaxb-coreUpgrade javassistUpgrade pki-core-debuginfoUpgrade pki-core-debugsourceUpgrade python-nss-docUpgrade pki-servlet-engineUpgrade pki-servlet-4.0-apiUpgrade pki-javadocUpgrade xalan-j2Upgrade python3-pkiUpgrade relaxngDatatypeUpgrade resteasyUpgrade python-nss-debugsourceUpgrade pki-toolsUpgrade glassfish-fastinfosetUpgrade xerces-j2Upgrade jackson-coreUpgrade jss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-langUpgrade jackson-annotationsUpgrade tomcatjssUpgrade xml-commons-apisUpgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-providersUpgrade pki-symkey-debuginfoUpgrade pki-base-javaUpgrade stax-exUpgrade jss-javadocUpgrade slf4jUpgrade pki-kraUpgrade xmlstreambufferUpgrade python3-nss-debuginfoUpgrade glassfish-jaxb-apiUpgrade slf4j-jdk14Upgrade ldapjdkUpgrade jackson-databindUpgrade pki-serverUpgrade jackson-jaxrs-json-providerUpgrade xsom | Nov 5, 2020 | Nov 3, 2020 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Apr 30, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 30, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub