Read the docs
TI-2019-08480 Aliases CVE-2019-11358GHSA-6c3j-c64m-qhgq

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles…

Priority HIGH 69CWE-1321Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Partial Red Hat: 29 fixed, 12 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.

Summary

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.8682 99th percentileScored 2026-11-07
Fix Partial jquery (npm): 3.4.0jquery-rails (RubyGems): 4.3.4+4 more productsRed Hat: 22 advisoriesRed Hat: 29 fixed, 12 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—jquery (npm)1.1.4 to before 3.4.03.4.0Patch availableGHSA-6c3j-c64m-qhgq
—jquery-rails (RubyGems)before 4.3.44.3.4Patch availableGHSA-6c3j-c64m-qhgq
—jQuery (NuGet)1.1.4 to before 3.4.03.4.0Patch availableGHSA-6c3j-c64m-qhgq
—django (PyPI)2.0a1 to before 2.1.92.1.9Patch availableGHSA-6c3j-c64m-qhgq
—django (PyPI)2.2a1 to before 2.2.22.2.2Patch availableGHSA-6c3j-c64m-qhgq
—org.webjars.npm:jquery (Maven)1.1.4 to before 3.4.03.4.0Patch availableGHSA-6c3j-c64m-qhgq
—maximebf/debugbar (Packagist)before 1.19.01.19.0Patch availableGHSA-6c3j-c64m-qhgq
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • jquery (npm) Vendor— Affected 1.1.4 to before 3.4.0 Fixed in 3.4.0 Patch available GHSA-6c3j-c64m-qhgq
  • jquery-rails (RubyGems) Vendor— Affected before 4.3.4 Fixed in 4.3.4 Patch available GHSA-6c3j-c64m-qhgq
  • jQuery (NuGet) Vendor— Affected 1.1.4 to before 3.4.0 Fixed in 3.4.0 Patch available GHSA-6c3j-c64m-qhgq
  • django (PyPI) Vendor— Affected 2.0a1 to before 2.1.9 Fixed in 2.1.9 Patch available GHSA-6c3j-c64m-qhgq
  • django (PyPI) Vendor— Affected 2.2a1 to before 2.2.2 Fixed in 2.2.2 Patch available GHSA-6c3j-c64m-qhgq
  • org.webjars.npm:jquery (Maven) Vendor— Affected 1.1.4 to before 3.4.0 Fixed in 3.4.0 Patch available GHSA-6c3j-c64m-qhgq
  • maximebf/debugbar (Packagist) Vendor— Affected before 1.19.0 Fixed in 1.19.0 Patch available GHSA-6c3j-c64m-qhgq

CPE configurations NVD · 211

CPEVersionsRoleVendor
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*before 3.4.0VulnerableJQuery
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*7.0 to before 7.66; 8.5.0 to before 8.5.15; 8.6.0 to before 8.6.15VulnerableDrupal
cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*1.11.0 to before 1.11.9; 1.12.0 to before 1.12.6Vulnerablebackdropcms
cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*28VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*29VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*30VulnerableFedoraproject
cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*15.0 sp1VulnerableopenSUSE
  • cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* Versions before 3.4.0 Vulnerable ·JQuery
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* Versions 7.0 to before 7.66; 8.5.0 to before 8.5.15; 8.6.0 to before 8.6.15 Vulnerable ·Drupal
  • cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:* Versions 1.11.0 to before 1.11.9; 1.12.0 to before 1.12.6 Vulnerable ·backdropcms
  • cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:* Versions 28 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* Versions 29 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* Versions 30 Vulnerable ·Fedoraproject
  • cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* Versions 15.0 sp1 Vulnerable ·openSUSE
Show 201 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*3.0 – 3.1.3VulnerableNetApp
cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:*4.7VulnerableRed Hat
cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:*4.3VulnerableRed Hat
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1:*:*:*:*:*:*:*6.1VulnerableOracle
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:*6.2.0.0VulnerableOracle
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:*6.2.1.0VulnerableOracle
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:*6.2.2.0VulnerableOracle
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:*6.2.3.0VulnerableOracle
cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*before 19.1VulnerableOracle
cpe:2.3:a:oracle:application_service_level_management:13.2.0.0:*:*:*:*:*:*:*13.2.0.0VulnerableOracle
cpe:2.3:a:oracle:application_service_level_management:13.3.0.0:*:*:*:*:*:*:*13.3.0.0VulnerableOracle
cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:*12.5.0.3VulnerableOracle
cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:*13.1.0.1VulnerableOracle
cpe:2.3:a:oracle:application_testing_suite:13.2:*:*:*:*:*:*:*13.2VulnerableOracle
cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:*13.2.0.1VulnerableOracle
cpe:2.3:a:oracle:application_testing_suite:13.3:*:*:*:*:*:*:*13.3VulnerableOracle
cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*13.3.0.1VulnerableOracle
cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:*18.1VulnerableOracle
cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:*18.2VulnerableOracle
cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:*18.3VulnerableOracle
cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:*19.1VulnerableOracle
cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:*19.2VulnerableOracle
cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*20.1VulnerableOracle
cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:*2.7.0 – 2.8.0VulnerableOracle
cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*2.4.0 – 2.10.0VulnerableOracle
cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0:*:*:*:*:*:*:*5.5.0.0.0VulnerableOracle
cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:big_data_discovery:1.6:*:*:*:*:*:*:*1.6VulnerableOracle
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:*12.1.1VulnerableOracle
cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:*3.8m0VulnerableOracle
cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:*7.5VulnerableOracle
cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:*7.5.0.23.0VulnerableOracle
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:*12.0VulnerableOracle
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*12.0.0.3.0VulnerableOracle
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:*8.0.0VulnerableOracle
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*8.1VulnerableOracle
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*8.2VulnerableOracle
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:*8.2.1VulnerableOracle
cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:*16.1.0 – 16.4.0VulnerableOracle
cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:*8.1.1VulnerableOracle
cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:*8.2.0VulnerableOracle
cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:*8.2.1VulnerableOracle
cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:*6.0 – 6.4VulnerableOracle
cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:*4.1 – 4.3VulnerableOracle
cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:*3.4VulnerableOracle
cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:*4.0VulnerableOracle
cpe:2.3:a:oracle:communications_operations_monitor:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableOracle
cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*7.0VulnerableOracle
cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:*8.1.1VulnerableOracle
cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:*8.2.0VulnerableOracle
cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:*8.2.1VulnerableOracle
cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:*8.1.1VulnerableOracle
cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:*8.2.0VulnerableOracle
cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:*8.2.1VulnerableOracle
cpe:2.3:a:oracle:communications_unified_inventory_management:7.3:*:*:*:*:*:*:*7.3VulnerableOracle
cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*7.4.0VulnerableOracle
cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:*7.2VulnerableOracle
cpe:2.3:a:oracle:diagnostic_assistant:2.12.36:*:*:*:*:*:*:*2.12.36VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*12.3.3VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*12.4.0VulnerableOracle
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*12.4.0.0VulnerableOracle
cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:*8.4VulnerableOracle
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*7.3.3 – 7.3.5; 8.0.2 – 8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:*8.0.8VulnerableOracle
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:*8.0.4 – 8.0.8VulnerableOracle
cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:*8.0.6 – 8.0.9VulnerableOracle
cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:*8.0.5 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.6:*:*:*:*:*:*:*8.0.6VulnerableOracle
cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.7:*:*:*:*:*:*:*8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.0.1.0:*:*:*:*:*:*:*8.0.0.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.2:*:*:*:*:*:*:*8.0.2VulnerableOracle
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.4.0.0:*:*:*:*:*:*:*8.0.4.0.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.5.0.0:*:*:*:*:*:*:*8.0.5.0.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:*8.0.6VulnerableOracle
cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:*8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:*8.0.8VulnerableOracle
cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:*8.0.2 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:*8.0.5VulnerableOracle
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:*8.0.6VulnerableOracle
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:*8.0.8VulnerableOracle
cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:*8.0.4VulnerableOracle
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.6:*:*:*:*:*:*:*8.0.6VulnerableOracle
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.7:*:*:*:*:*:*:*8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_retail_customer_analytics:*:*:*:*:*:*:*:*8.0.4 – 8.0.6VulnerableOracle
cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.6:*:*:*:*:*:*:*8.0.6VulnerableOracle
cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.7:*:*:*:*:*:*:*8.0.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.0:*:*:*:*:*:*:*2.4.0.0VulnerableOracle
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.1:*:*:*:*:*:*:*2.4.0.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:*7.1.1VulnerableOracle
cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:*7.2.0VulnerableOracle
cpe:2.3:a:oracle:healthcare_foundation:7.2.2:*:*:*:*:*:*:*7.2.2VulnerableOracle
cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:*7.3.0VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:*3.1.0VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:*3.4.0VulnerableOracle
cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*4.2.0VulnerableOracle
cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*4.2.1VulnerableOracle
cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:*18.1VulnerableOracle
cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:*19.1.0 – 19.1.2VulnerableOracle
cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:*18.1VulnerableOracle
cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:*18.2VulnerableOracle
cpe:2.3:a:oracle:identity_manager:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:*8.0.9VulnerableOracle
cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:*8.0.8VulnerableOracle
cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableOracle
cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:*8.0.4 – 8.0.7VulnerableOracle
cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.6:*:*:*:*:*:*:*8.0.6VulnerableOracle
cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.7:*:*:*:*:*:*:*8.0.7VulnerableOracle
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:*5.0.0.0 – 5.6.0.0VulnerableOracle
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:*5.6.1.0VulnerableOracle
cpe:2.3:a:oracle:insurance_performance_insight:8.0.7:*:*:*:*:*:*:*8.0.7VulnerableOracle
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*9.2VulnerableOracle
cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*11.1.1.9.0VulnerableOracle
cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:jdeveloper_and_adf:11.1.1.9.0:*:*:*:*:*:*:*11.1.1.9.0VulnerableOracle
cpe:2.3:a:oracle:jdeveloper_and_adf:12.1.3.0.0:*:*:*:*:*:*:*12.1.3.0.0VulnerableOracle
cpe:2.3:a:oracle:jdeveloper_and_adf:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:knowledge:*:*:*:*:*:*:*:*8.6.0 – 8.6.3VulnerableOracle
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*8.55VulnerableOracle
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*8.56VulnerableOracle
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*8.57VulnerableOracle
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*8.58VulnerableOracle
cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:*12.2.0 – 12.2.15VulnerableOracle
cpe:2.3:a:oracle:policy_automation:10.4.7:*:*:*:*:*:*:*10.4.7VulnerableOracle
cpe:2.3:a:oracle:policy_automation:12.1.0:*:*:*:*:*:*:*12.1.0VulnerableOracle
cpe:2.3:a:oracle:policy_automation:12.1.1:*:*:*:*:*:*:*12.1.1VulnerableOracle
cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:*10.4.6VulnerableOracle
cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:*12.2.0 – 12.2.15VulnerableOracle
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*16.2.0 – 16.2.11; 17.12.0 – 17.12.7; 18.8.0 – 18.8.9; 19.12.0 – 19.12.4VulnerableOracle
cpe:2.3:a:oracle:primavera_gateway:15.2.18:*:*:*:*:*:*:*15.2.18VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*17.7 – 17.12VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*16.1VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*16.2VulnerableOracle
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*18.8VulnerableOracle
cpe:2.3:a:oracle:real-time_scheduler:*:*:*:*:*:*:*:*2.3.0.1 – 2.3.0.3VulnerableOracle
cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:*11.2.0.4VulnerableOracle
cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:*12.1.0.2VulnerableOracle
cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:*12.2.0.1VulnerableOracle
cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:*18cVulnerableOracle
cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:*19cVulnerableOracle
cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:*14.0VulnerableOracle
cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:*14.0VulnerableOracle
cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:*15.0VulnerableOracle
cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:*16.0VulnerableOracle
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:*18.0VulnerableOracle
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*19.0VulnerableOracle
cpe:2.3:a:oracle:retail_point-of-service:14.0:*:*:*:*:*:*:*14.0VulnerableOracle
cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:*14.0VulnerableOracle
cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*14.1VulnerableOracle
cpe:2.3:a:oracle:service_bus:11.1.1.9.0:*:*:*:*:*:*:*11.1.1.9.0VulnerableOracle
cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:*12.1.3.0.0VulnerableOracle
cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:siebel_mobile_applications:*:*:*:*:*:*:*:*up to 19.8VulnerableOracle
cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:*20.8VulnerableOracle
cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.0:*:*:*:*:*:*:*2.3.0VulnerableOracle
cpe:2.3:a:oracle:system_utilities:19.1:*:*:*:*:*:*:*19.1VulnerableOracle
cpe:2.3:a:oracle:tape_library_acsls:8.5:*:*:*:*:*:*:*8.5VulnerableOracle
cpe:2.3:a:oracle:tape_library_acsls:8.5.1:*:*:*:*:*:*:*8.5.1VulnerableOracle
cpe:2.3:a:oracle:transportation_management:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableOracle
cpe:2.3:a:oracle:utilities_mobile_workforce_management:*:*:*:*:*:*:*:*2.3.0.1 – 2.3.0.3VulnerableOracle
cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*10.3.6.0.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*12.1.3.0.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*14.1.1.0.0VulnerableOracle
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*3.0.0 – 3.9.4VulnerableJoomla!
cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*21.2VulnerableJuniper
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
  • cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* Versions 3.0 – 3.1.3 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:* Versions 4.7 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·Red Hat
  • cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* Versions 6.2.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:* Versions 6.2.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* Versions 6.2.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* Versions 6.2.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* Versions before 19.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_service_level_management:13.2.0.0:*:*:*:*:*:*:* Versions 13.2.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_service_level_management:13.3.0.0:*:*:*:*:*:*:* Versions 13.3.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:* Versions 12.5.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:* Versions 13.1.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_testing_suite:13.2:*:*:*:*:*:*:* Versions 13.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:* Versions 13.2.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_testing_suite:13.3:*:*:*:*:*:*:* Versions 13.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* Versions 13.3.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:* Versions 18.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:* Versions 18.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:* Versions 18.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* Versions 19.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* Versions 19.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* Versions 20.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:* Versions 2.7.0 – 2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:* Versions 2.4.0 – 2.10.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0:*:*:*:*:*:*:* Versions 5.5.0.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:big_data_discovery:1.6:*:*:*:*:*:*:* Versions 1.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* Versions 12.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:* Versions 3.8m0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:* Versions 7.5.0.23.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:* Versions 12.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:* Versions 12.0.0.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:* Versions 8.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* Versions 16.1.0 – 16.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:* Versions 8.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* Versions 6.0 – 6.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:* Versions 4.1 – 4.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_operations_monitor:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:* Versions 8.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:* Versions 8.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_unified_inventory_management:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:* Versions 7.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:diagnostic_assistant:2.12.36:*:*:*:*:*:*:* Versions 2.12.36 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* Versions 12.3.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:* Versions 12.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* Versions 12.4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* Versions 7.3.3 – 7.3.5; 8.0.2 – 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:* Versions 8.0.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:* Versions 8.0.6 – 8.0.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:* Versions 8.0.5 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.6:*:*:*:*:*:*:* Versions 8.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.0.1.0:*:*:*:*:*:*:* Versions 8.0.0.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.2:*:*:*:*:*:*:* Versions 8.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.4.0.0:*:*:*:*:*:*:* Versions 8.0.4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.5.0.0:*:*:*:*:*:*:* Versions 8.0.5.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:* Versions 8.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* Versions 8.0.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* Versions 8.0.2 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:* Versions 8.0.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* Versions 8.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* Versions 8.0.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:* Versions 8.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.6:*:*:*:*:*:*:* Versions 8.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_retail_customer_analytics:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.6:*:*:*:*:*:*:* Versions 8.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.0:*:*:*:*:*:*:* Versions 2.4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.1:*:*:*:*:*:*:* Versions 2.4.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* Versions 7.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* Versions 7.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_foundation:7.2.2:*:*:*:*:*:*:* Versions 7.2.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* Versions 7.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:* Versions 3.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* Versions 18.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:* Versions 19.1.0 – 19.1.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* Versions 18.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* Versions 18.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:identity_manager:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:* Versions 8.0.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:* Versions 8.0.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:* Versions 8.0.4 – 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.6:*:*:*:*:*:*:* Versions 8.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* Versions 5.0.0.0 – 5.6.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* Versions 5.6.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:insurance_performance_insight:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* Versions 11.1.1.9.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdeveloper_and_adf:11.1.1.9.0:*:*:*:*:*:*:* Versions 11.1.1.9.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdeveloper_and_adf:12.1.3.0.0:*:*:*:*:*:*:* Versions 12.1.3.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdeveloper_and_adf:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:knowledge:*:*:*:*:*:*:*:* Versions 8.6.0 – 8.6.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:* Versions 8.55 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* Versions 8.56 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* Versions 8.57 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* Versions 8.58 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* Versions 12.2.0 – 12.2.15 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:policy_automation:10.4.7:*:*:*:*:*:*:* Versions 10.4.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:policy_automation:12.1.0:*:*:*:*:*:*:* Versions 12.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:policy_automation:12.1.1:*:*:*:*:*:*:* Versions 12.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:* Versions 10.4.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:* Versions 12.2.0 – 12.2.15 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* Versions 16.2.0 – 16.2.11; 17.12.0 – 17.12.7; 18.8.0 – 18.8.9; 19.12.0 – 19.12.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_gateway:15.2.18:*:*:*:*:*:*:* Versions 15.2.18 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* Versions 17.7 – 17.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:* Versions 16.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:* Versions 16.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* Versions 18.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:real-time_scheduler:*:*:*:*:*:*:*:* Versions 2.3.0.1 – 2.3.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* Versions 11.2.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* Versions 12.1.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* Versions 12.2.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* Versions 18c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:* Versions 19c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* Versions 14.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:* Versions 14.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:* Versions 18.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:* Versions 19.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_point-of-service:14.0:*:*:*:*:*:*:* Versions 14.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:* Versions 14.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:service_bus:11.1.1.9.0:*:*:*:*:*:*:* Versions 11.1.1.9.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:* Versions 12.1.3.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:siebel_mobile_applications:*:*:*:*:*:*:*:* Versions up to 19.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* Versions 20.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:system_utilities:19.1:*:*:*:*:*:*:* Versions 19.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:tape_library_acsls:8.5:*:*:*:*:*:*:* Versions 8.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:tape_library_acsls:8.5.1:*:*:*:*:*:*:* Versions 8.5.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:transportation_management:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:utilities_mobile_workforce_management:*:*:*:*:*:*:*:* Versions 2.3.0.1 – 2.3.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* Versions 10.3.6.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* Versions 12.1.3.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* Versions 14.1.1.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* Versions 3.0.0 – 3.9.4 Vulnerable ·Joomla!
  • cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:* Versions 21.2 Vulnerable ·Juniper

Remediation

  • Fix · GHSA-6c3j-c64m-qhgq jquery (npm) Fixed in 3.4.0 Advisory →
  • Fix · GHSA-6c3j-c64m-qhgq jquery-rails (RubyGems) Fixed in 4.3.4 Advisory →
  • Fix · GHSA-6c3j-c64m-qhgq jQuery (NuGet) Fixed in 3.4.0 Advisory →
  • Fix · GHSA-6c3j-c64m-qhgq django (PyPI) Fixed in 2.1.9 Advisory →
  • Fix · GHSA-6c3j-c64m-qhgq django (PyPI) Fixed in 2.2.2 Advisory →
  • Fix · GHSA-6c3j-c64m-qhgq org.webjars.npm:jquery (Maven) Fixed in 3.4.0 Advisory →
  • Fix · GHSA-6c3j-c64m-qhgq maximebf/debugbar (Packagist) Fixed in 1.19.0 Advisory →

Red Hat 22 advisories

  • RHSA-2023:1043 Released 2023-03-01 · Red Hat rating Important
    Red Hat Single Sign-On 7.6.2 security update on RHEL 7
    • Red Hat Single Sign-On 7.6 for RHEL 7 Server rh-sso7-keycloak-18.0.6-1.redhat_00001.1.el7sso, rh-sso7-keycloak-server-18.0.6-1.redhat_00001.1.el7sso
  • RHSA-2023:1049 Released 2023-03-01 · Red Hat rating Important
    Red Hat Single Sign-On 7.6.2 security update
    • Red Hat Single Sign-On 7
  • RHSA-2023:1047 Released 2023-03-01 · Red Hat rating Important
    Red Hat Single Sign-On 7.6.2 for OpenShift image security and enhancement update
    • Middleware Containers for OpenShift rh-sso-7/sso76-openshift-rhel8
Show 19 more Red Hat advisories
  • RHSA-2023:1045 Released 2023-03-01 · Red Hat rating Important
    Red Hat Single Sign-On 7.6.2 security update on RHEL 9
    • Red Hat Single Sign-On 7.6 for RHEL 9 rh-sso7-keycloak-18.0.6-1.redhat_00001.1.el9sso, rh-sso7-keycloak-server-18.0.6-1.redhat_00001.1.el9sso
  • RHSA-2023:1044 Released 2023-03-01 · Red Hat rating Important
    Red Hat Single Sign-On 7.6.2 security update on RHEL 8
    • Red Hat Single Sign-On 7.6 for RHEL 8 rh-sso7-keycloak-18.0.6-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-18.0.6-1.redhat_00001.1.el8sso
  • RHSA-2023:0556 Released 2023-01-31 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.9 Security update
    • Red Hat JBoss Enterprise Application Platform 7.4.9 com.fasterxml.jackson.core.jackson-databind-2.12.7.redhat-00003.jar, com.fasterxml.woodstox.woodstox-core-6.4.0.redhat-00001.jar, org.apache.cxf.cxf-core-3.4.10.redhat-00001.jar +4
  • RHSA-2023:0554 Released 2023-01-31 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.9 Security update
    • Red Hat JBoss EAP 7.4 for RHEL 9 eap7-apache-sshd-2.9.2-1.redhat_00001.1.el9eap, eap7-elytron-web-1.9.3-1.Final_redhat_00001.1.el9eap, eap7-hal-console-3.3.16-1.Final_redhat_00001.1.el9eap +44
  • RHSA-2023:0552 Released 2023-01-31 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.9 Security update
    • Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-apache-sshd-2.9.2-1.redhat_00001.1.el7eap, eap7-elytron-web-1.9.3-1.Final_redhat_00001.1.el7eap, eap7-hal-console-3.3.16-1.Final_redhat_00001.1.el7eap +46
  • RHSA-2023:0553 Released 2023-01-31 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.9 Security update
    • Red Hat JBoss EAP 7.4 for RHEL 8 eap7-apache-sshd-2.9.2-1.redhat_00001.1.el8eap, eap7-elytron-web-1.9.3-1.Final_redhat_00001.1.el8eap, eap7-hal-console-3.3.16-1.Final_redhat_00001.1.el8eap +44
  • RHSA-2022:7343 Released 2022-11-02 · Red Hat rating Important
    pcs security update
    • Red Hat Enterprise Linux Server High Availability (v. 7) pcs-0.9.169-3.el7_9.3, pcs-snmp-0.9.169-3.el7_9.3
    • Red Hat Enterprise Linux Server Resilient Storage (v. 7) pcs-0.9.169-3.el7_9.3, pcs-snmp-0.9.169-3.el7_9.3
  • RHSA-2021:4142 Released 2021-11-09 · Red Hat rating Low
    pcs security, bug fix, and enhancement update
    • Red Hat Enterprise Linux High Availability (v. 8) pcs-0.10.10-4.el8, pcs-snmp-0.10.10-4.el8
    • Red Hat Enterprise Linux Resilient Storage (v. 8) pcs-0.10.10-4.el8, pcs-snmp-0.10.10-4.el8
  • RHSA-2020:5581 Released 2020-12-16 · Red Hat rating Moderate
    python-XStatic-jQuery security update
    • Red Hat OpenStack Platform 13.0 python-XStatic-jQuery-2.2.4.1-3.el7ost
    • Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server python-XStatic-jQuery-2.2.4.1-3.el7ost
  • RHSA-2020:4847 Released 2020-11-04 · Red Hat rating Moderate
    pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6, apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6, apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6 +47
  • RHSA-2020:4670 Released 2020-11-04 · Red Hat rating Moderate
    idm:DL1 and idm:client security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) bind-dyndb-ldap-11.3-1.module+el8.3.0+6993+104f8db0.aarch64::idm:DL1, bind-dyndb-ldap-11.3-1.module+el8.3.0+6993+104f8db0.ppc64le::idm:DL1, bind-dyndb-ldap-11.3-1.module+el8.3.0+6993+104f8db0.s390x::idm:DL1 +47
  • RHSA-2020:4298 Released 2020-10-27 · Red Hat rating Moderate
    OpenShift Container Platform 4.6.1 image security update
    • Red Hat OpenShift Container Platform 4.6 openshift4/ose-ansible-operator, openshift4/ose-aws-machine-controllers, openshift4/ose-azure-machine-controllers +47
  • RHSA-2020:3936 Released 2020-09-29 · Red Hat rating Moderate
    ipa security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Client (v. 7) ipa-4.6.8-5.el7, ipa-client-4.6.8-5.el7, ipa-client-common-4.6.8-5.el7 +4
    • Red Hat Enterprise Linux Client Optional (v. 7) ipa-server-4.6.8-5.el7, ipa-server-common-4.6.8-5.el7, ipa-server-dns-4.6.8-5.el7 +2
    • Red Hat Enterprise Linux ComputeNode (v. 7) ipa-4.6.8-5.el7, ipa-client-4.6.8-5.el7, ipa-client-common-4.6.8-5.el7 +4
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-server-4.6.8-5.el7, ipa-server-common-4.6.8-5.el7, ipa-server-dns-4.6.8-5.el7 +2
    • Red Hat Enterprise Linux Server (v. 7) ipa-4.6.8-5.el7, ipa-client-4.6.8-5.el7, ipa-client-common-4.6.8-5.el7 +9
    • Red Hat Enterprise Linux Workstation (v. 7) ipa-4.6.8-5.el7, ipa-client-4.6.8-5.el7, ipa-client-common-4.6.8-5.el7 +9
  • RHSA-2020:2412 Released 2020-07-13 · Red Hat rating Moderate
    OpenShift Container Platform 4.5 container image security update
    • Red Hat OpenShift Container Platform 4.5 openshift4/ose-cluster-logging-operator, openshift4/ose-console, openshift4/ose-hyperkube +2
  • RHSA-2020:1325 Released 2020-04-06 · Red Hat rating Moderate
    python-XStatic-jQuery security update
    • Red Hat OpenStack Platform 15.0 python-XStatic-jQuery-3.4.1.0-1.el8ost, python3-XStatic-jQuery-3.4.1.0-1.el8ost
  • RHSA-2019:3024 Released 2019-10-10 · Red Hat rating Moderate
    ovirt-web-ui security and bug fix update
    • RHV-M 4.3 ovirt-web-ui-1.6.0-1.el7ev
  • RHSA-2019:3023 Released 2019-10-10 · Red Hat rating Moderate
    ovirt-engine-ui-extensions security and bug fix update
    • RHV-M 4.3 ovirt-engine-ui-extensions-1.0.10-1.el7ev
  • RHSA-2019:2587 Released 2019-09-05 · Red Hat rating Moderate
    CloudForms 4.7.9 security, bug fix and enhancement update
    • CloudForms Management Engine 5.10 ansible-tower-3.5.2-1.el7at, ansible-tower-server-3.5.2-1.el7at, ansible-tower-setup-3.5.2-1.el7at +15
  • RHSA-2019:1456 Released 2019-06-11 · Red Hat rating Moderate
    Red Hat Single Sign-On 7.3.2 security update
    • Red Hat Single Sign-On 7.3.2 zip

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat 3scale API Management Platform 2AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Fuse 7AffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 3.11AffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 14 (Rocky)AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 9 (Mitaka)AffectedNo fix planned: Will not fix
Red Hat Satellite 5AffectedNo fix planned: Out of support scope
Red Hat Software CollectionsAffectedNo fix planned: Will not fix
Red Hat Virtualization 4AffectedNo fix planned: Out of support scope
CloudForms Management Engine 5.10Fixed RHSA-2019:2587
Middleware Containers for OpenShiftFixed RHSA-2023:1047
RHV-M 4.3Fixed RHSA-2019:3023, RHSA-2019:3024
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2020:4670, RHSA-2020:4847
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2020:3936
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2020:3936
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2020:3936
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2020:3936
Red Hat Enterprise Linux High Availability (v. 8)Fixed RHSA-2021:4142
Red Hat Enterprise Linux Resilient Storage (v. 8)Fixed RHSA-2021:4142
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2020:3936
Red Hat Enterprise Linux Server High Availability (v. 7)Fixed RHSA-2022:7343
Red Hat Enterprise Linux Server Resilient Storage (v. 7)Fixed RHSA-2022:7343
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2020:3936
Red Hat JBoss EAP 7.4 for RHEL 7 ServerFixed RHSA-2023:0552
Red Hat JBoss EAP 7.4 for RHEL 8Fixed RHSA-2023:0553
Red Hat JBoss EAP 7.4 for RHEL 9Fixed RHSA-2023:0554
Red Hat JBoss Enterprise Application Platform 7.4.9Fixed RHSA-2023:0556
Red Hat OpenShift Container Platform 3.11Fixed—
Red Hat OpenShift Container Platform 4.5Fixed RHSA-2020:2412
Red Hat OpenShift Container Platform 4.6Fixed RHSA-2020:4298
Red Hat OpenStack Platform 13.0Fixed RHSA-2020:5581
Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS ServerFixed RHSA-2020:5581
Red Hat OpenStack Platform 15.0Fixed RHSA-2020:1325
Red Hat Single Sign-On 7Fixed RHSA-2023:1049
Red Hat Single Sign-On 7.3.2 zipFixed RHSA-2019:1456
Red Hat Single Sign-On 7.6 for RHEL 7 ServerFixed RHSA-2023:1043
Red Hat Single Sign-On 7.6 for RHEL 8Fixed RHSA-2023:1044
Red Hat Single Sign-On 7.6 for RHEL 9Fixed RHSA-2023:1045
Not affected: 13 products
  • Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • Red Hat JBoss EAP 7.4 for RHEL 8
  • Red Hat JBoss EAP 7.4 for RHEL 9
  • Red Hat JBoss Enterprise Application Platform 7.4.9
  • Red Hat OpenShift Container Platform 3.11
  • Red Hat OpenShift Container Platform 4.5
  • Red Hat OpenShift Container Platform 4.6
  • Red Hat OpenStack Platform 13 (Queens)
  • Red Hat OpenStack Platform 15 (Stein)
  • Red Hat Quay 3
  • Red Hat Satellite 5
  • Red Hat Satellite 6
  • Red Hat Storage 3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-11358
  2. 2026-10-03 Alias added: GHSA-6c3j-c64m-qhgq

References

Patch 19

Advisory 34

Other 63

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences