In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-pyusbUpgrade python3-custodiaUpgrade python3-yubicoUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade custodiaUpgrade python3-qrcode | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade cactiUpgrade drupal7 | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade python2-ipalibUpgrade python2-ipaserverUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade ipa-commonUpgrade ipa-server-commonUpgrade ipa-python-compat | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade python3-pkiUpgrade pki-core-debuginfoUpgrade relaxngDatatypeUpgrade ipa-healthcheck-coreUpgrade ipa-debuginfoUpgrade jss-debugsourceUpgrade jss-javadocUpgrade pki-baseUpgrade jackson-coreUpgrade pki-tools-debuginfoUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-coreUpgrade jackson-jaxrs-json-providerUpgrade javassist-javadocUpgrade ipa-server-debuginfoUpgrade pki-base-javaUpgrade bind-dyndb-ldapUpgrade opendnssec-debugsourceUpgrade pki-serverUpgrade ipa-server-trust-ad-debuginfoUpgrade xsomUpgrade ipa-client-commonUpgrade xmlstreambufferUpgrade softhsm-debugsourceUpgrade ipa-client-debuginfoUpgrade ipa-python-compatUpgrade jackson-databindUpgrade glassfish-jaxb-runtimeUpgrade python3-ipaclientUpgrade tomcatjssUpgrade softhsmUpgrade ipa-server-commonUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade python2-ipaserverUpgrade jssUpgrade apache-commons-netUpgrade slapi-nis-debuginfoUpgrade python3-ipalibUpgrade xerces-j2Upgrade bind-dyndb-ldap-debuginfoUpgrade pki-symkeyUpgrade pki-servlet-4.0-apiUpgrade glassfish-fastinfosetUpgrade xml-commons-resolverUpgrade opendnssecUpgrade ldapjdkUpgrade pki-caUpgrade python3-jwcryptoUpgrade python3-nss-debuginfoUpgrade custodiaUpgrade apache-commons-collectionsUpgrade xalan-j2Upgrade python3-qrcode-coreUpgrade ipa-server-trust-adUpgrade pki-core-debugsourceUpgrade ipa-server-dnsUpgrade stax-exUpgrade python3-custodiaUpgrade pki-kraUpgrade jakarta-commons-httpclientUpgrade softhsm-develUpgrade slf4jUpgrade jackson-annotationsUpgrade glassfish-jaxb-apiUpgrade velocityUpgrade jackson-jaxrs-providersUpgrade python-nss-debugsourceUpgrade jss-debuginfoUpgrade ipa-healthcheckUpgrade slapi-nisUpgrade resteasyUpgrade python3-yubicoUpgrade pki-symkey-debuginfoUpgrade ldapjdk-javadocUpgrade javassistUpgrade ipa-selinuxUpgrade softhsm-debuginfoUpgrade ipa-commonUpgrade python3-ipaserverUpgrade python3-nssUpgrade pki-servlet-engineUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade python3-qrcodeUpgrade xml-commons-apisUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-langUpgrade pki-toolsUpgrade bea-stax-apiUpgrade python-nss-docUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-clientUpgrade opendnssec-debuginfoUpgrade ipa-serverUpgrade ipa-debugsourceUpgrade slf4j-jdk14Upgrade slapi-nis-debugsource | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade otrs2Upgrade node-jquery | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 8.8.6Upgrade to drupal version 8.7.1Upgrade to drupal version 7.70 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade gitlab-ceUpgrade cacti | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti.Upgrade net-analyzer/cacti-spine. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade python2-ipalibUpgrade jackson-databindUpgrade relaxngDatatypeUpgrade xsomUpgrade pki-servlet-engineUpgrade xmlstreambufferUpgrade softhsm-develUpgrade pki-toolsUpgrade ldapjdkUpgrade ipa-client-commonUpgrade xalan-j2Upgrade ipa-commonUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade javassistUpgrade python3-pyusbUpgrade opendnssecUpgrade custodiaUpgrade ipa-python-compatUpgrade jackson-module-jaxb-annotationsUpgrade python3-ipaclientUpgrade pki-serverUpgrade javassist-javadocUpgrade jss-javadocUpgrade ipa-server-commonUpgrade ipa-client-sambaUpgrade python3-qrcode-coreUpgrade slf4jUpgrade softhsmUpgrade tomcatjssUpgrade jackson-annotationsUpgrade apache-commons-langUpgrade glassfish-jaxb-txw2Upgrade ipa-clientUpgrade ipa-serverUpgrade pki-base-javaUpgrade apache-commons-netUpgrade python3-ipaserverUpgrade glassfish-jaxb-apiUpgrade jakarta-commons-httpclientUpgrade python3-jwcryptoUpgrade xml-commons-resolverUpgrade bind-dyndb-ldapUpgrade python3-pkiUpgrade python3-custodiaUpgrade python3-yubicoUpgrade glassfish-fastinfosetUpgrade xerces-j2Upgrade pki-servlet-4.0-apiUpgrade resteasyUpgrade xml-commons-apisUpgrade slf4j-jdk14Upgrade stax-exUpgrade jackson-coreUpgrade slapi-nisUpgrade ipa-selinuxUpgrade pki-symkeyUpgrade ipa-server-trust-adUpgrade python-nss-docUpgrade velocityUpgrade python2-ipaserverUpgrade python3-qrcodeUpgrade pki-caUpgrade ipa-healthcheck-coreUpgrade ipa-client-epnUpgrade glassfish-jaxb-runtimeUpgrade python3-nssUpgrade jackson-jaxrs-providersUpgrade ipa-server-dnsUpgrade ipa-healthcheckUpgrade pki-kraUpgrade jquery-uiUpgrade jssUpgrade apache-commons-collectionsUpgrade python2-ipaclientUpgrade pki-baseUpgrade bea-stax-apiUpgrade python3-ipalibUpgrade python3-kdcproxy | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade python3-jwcryptoUpgrade softhsm-debuginfoUpgrade xml-commons-apisUpgrade python2-ipaclientUpgrade jackson-module-jaxb-annotationsUpgrade xerces-j2Upgrade relaxngDatatypeUpgrade pki-tools-debuginfoUpgrade ipa-server-debuginfoUpgrade ipa-commonUpgrade pki-kraUpgrade tomcatjssUpgrade python3-yubicoUpgrade custodiaUpgrade ipa-server-trust-adUpgrade pki-core-debuginfoUpgrade pki-serverUpgrade slf4j-jdk14Upgrade pki-core-debugsourceUpgrade jss-javadocUpgrade slapi-nisUpgrade pki-caUpgrade jackson-jaxrs-providersUpgrade ipa-serverUpgrade jackson-jaxrs-json-providerUpgrade opendnssec-debuginfoUpgrade ipa-selinuxUpgrade apache-commons-langUpgrade apache-commons-netUpgrade ldapjdkUpgrade pki-servlet-4.0-apiUpgrade ipa-healthcheckUpgrade python3-ipaserverUpgrade slapi-nis-debuginfoUpgrade jackson-databindUpgrade bind-dyndb-ldap-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade pki-baseUpgrade python2-ipaserverUpgrade python3-ipalibUpgrade xml-commons-resolverUpgrade xmlstreambufferUpgrade bea-stax-apiUpgrade ipa-clientUpgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debuginfoUpgrade jackson-annotationsUpgrade python3-pkiUpgrade resteasyUpgrade glassfish-jaxb-txw2Upgrade ipa-server-trust-ad-debuginfoUpgrade jackson-coreUpgrade softhsmUpgrade stax-exUpgrade ipa-server-commonUpgrade xsomUpgrade python-nss-debugsourceUpgrade ipa-client-debuginfoUpgrade pki-toolsUpgrade jss-debugsourceUpgrade softhsm-develUpgrade javassist-javadocUpgrade glassfish-jaxb-coreUpgrade ipa-server-dnsUpgrade softhsm-debugsourceUpgrade pki-symkey-debuginfoUpgrade jss-debuginfoUpgrade jssUpgrade glassfish-jaxb-apiUpgrade ipa-client-commonUpgrade opendnssec-debugsourceUpgrade ipa-debuginfoUpgrade bind-dyndb-ldapUpgrade glassfish-fastinfosetUpgrade apache-commons-collectionsUpgrade python3-qrcode-coreUpgrade python3-nss-debuginfoUpgrade python3-pyusbUpgrade python-nss-docUpgrade opendnssecUpgrade ipa-python-compatNo solution existsUpgrade xalan-j2Upgrade ipa-debugsourceUpgrade python3-qrcodeUpgrade python2-ipalibUpgrade pki-base-javaUpgrade javassistUpgrade python3-custodiaUpgrade python3-nssUpgrade slf4jUpgrade python3-ipaclientUpgrade pki-symkeyUpgrade ldapjdk-javadocUpgrade slapi-nis-debugsourceUpgrade velocityUpgrade jakarta-commons-httpclientUpgrade ipa-healthcheck-coreUpgrade ipa-client-epnUpgrade python3-kdcproxyUpgrade pki-servlet-engine | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python3-nssUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfo | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade otrsUpgrade otrs-docUpgrade cacti-spineUpgrade cactiUpgrade otrs-itsm | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade libjs-jqueryUpgrade drupal7 (Ubuntu Pro)Upgrade libjs-jquery (Ubuntu Pro) | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub