Priority MEDIUM 51
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.29726 · Published 2018-01-18 · Partial fix · 1.12.2, 3.0.0 +1 CWE-79
Priority MEDIUM 50
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System).
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01509 · Published 2018-01-18 · No fix listed
Priority MEDIUM 50
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.29186 · Published 2017-03-15 · Partial fix · 1.12.0, 6.0.0 CWE-79
Priority MEDIUM 42
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System).
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01535 · Published 2018-01-18 · No fix listed
Priority MEDIUM 41
Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Gangway Activity Web App).
CVSS 3.0HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02007 · Published 2018-07-18 · No fix listed
Priority MEDIUM 40
Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite).
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.01201 · Published 2018-04-19 · No fix listed
Priority LOW 39
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage).
CVSS 3.0HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00384 · Published 2017-10-19 · No fix listed
Priority LOW 38
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System).
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01743 · Published 2018-10-17 · No fix listed
Priority LOW 35
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System).
CVSS 3.0HIGH 7.6· Network · Low privileges · User interaction · EPSS 0.00833 · Published 2018-01-18 · No fix listed
Priority LOW 34
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System).
CVSS 3.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.0123 · Published 2018-10-17 · No fix listed
Priority LOW 34
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite).
CVSS 3.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.0159 · Published 2017-08-08 · No fix listed
Priority LOW 32
Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite).
CVSS 3.0HIGH 7.1· Local · No auth · No interaction · EPSS 0.00498 · Published 2018-07-18 · No fix listed
Priority LOW 31
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01207 · Published 2018-10-17 · No fix listed
Priority LOW 29
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage).
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00942 · Published 2017-10-19 · No fix listed
Priority LOW 28
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Sender and Receiver).
CVSS 3.0MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00421 · Published 2018-10-17 · No fix listed
Priority LOW 28
Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Management System Suite).
CVSS 3.0MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00513 · Published 2018-07-18 · No fix listed
Priority LOW 26
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWebApp).
CVSS 3.0MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2017-10-19 · No fix listed
Priority LOW 17
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWebApp).
CVSS 3.0LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00872 · Published 2017-10-19 · No fix listed