Read the docs
TI-2020-08897 Aliases CVE-2020-11023GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

Priority CRITICAL 88Exploited in the wildCWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · Low · None
Fix status
Partial Red Hat: 69 fixed, 12 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.

Summary

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Why it matters now

Exploitation Active In CISA KEV since 2025-01-23CISA due date 2025-02-13
EPSS 0.84887 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial jQuery (jquery): 3.5.0jquery (npm): 3.5.0+4 more productsRed Hat: 63 advisoriesRed Hat: 69 fixed, 12 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
JQueryjQuery1.0.3 to before 3.5.03.5.0Patch availableCNA
—jquery (npm)1.0.3 to before 3.5.03.5.0Patch availableGHSA-jpcq-cgw6-v4j6
—jquery-rails (RubyGems)before 4.4.04.4.0Patch availableGHSA-jpcq-cgw6-v4j6
—jQuery (NuGet)1.0.3 to before 3.5.03.5.0Patch availableGHSA-jpcq-cgw6-v4j6
—org.webjars.npm:jquery (Maven)1.0.3 to before 3.5.03.5.0Patch availableGHSA-jpcq-cgw6-v4j6
—components/jquery (Packagist)1.0.3 to before 3.5.03.5.0Patch availableGHSA-jpcq-cgw6-v4j6
  • jQuery VendorJQuery Affected 1.0.3 to before 3.5.0 Fixed in 3.5.0 Patch available CNA
  • jquery (npm) Vendor— Affected 1.0.3 to before 3.5.0 Fixed in 3.5.0 Patch available GHSA-jpcq-cgw6-v4j6
  • jquery-rails (RubyGems) Vendor— Affected before 4.4.0 Fixed in 4.4.0 Patch available GHSA-jpcq-cgw6-v4j6
  • jQuery (NuGet) Vendor— Affected 1.0.3 to before 3.5.0 Fixed in 3.5.0 Patch available GHSA-jpcq-cgw6-v4j6
  • org.webjars.npm:jquery (Maven) Vendor— Affected 1.0.3 to before 3.5.0 Fixed in 3.5.0 Patch available GHSA-jpcq-cgw6-v4j6
  • components/jquery (Packagist) Vendor— Affected 1.0.3 to before 3.5.0 Fixed in 3.5.0 Patch available GHSA-jpcq-cgw6-v4j6

CPE configurations NVD · 84

CPEVersionsRoleVendor
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*1.0.3 to before 3.5.0VulnerableJQuery
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*31VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*32VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*33VulnerableFedoraproject
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*7.0 to before 7.70; 8.7.0 to before 8.7.14; 8.8.0 to before 8.8.6VulnerableDrupal
cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*before 20.2VulnerableOracle
cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*13.3.0.1VulnerableOracle
cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:*2.7.0 – 2.8.0VulnerableOracle
cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*2.4.0 – 2.10.0VulnerableOracle
  • cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* Versions 1.0.3 to before 3.5.0 Vulnerable ·JQuery
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* Versions 31 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* Versions 32 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* Versions 33 Vulnerable ·Fedoraproject
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* Versions 7.0 to before 7.70; 8.7.0 to before 8.7.14; 8.8.0 to before 8.8.6 Vulnerable ·Drupal
  • cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* Versions before 20.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* Versions 13.3.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:* Versions 2.7.0 – 2.8.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:* Versions 2.4.0 – 2.10.0 Vulnerable ·Oracle
Show 74 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*before 21.1.2VulnerableOracle
cpe:2.3:a:oracle:blockchain_platform:21.1.2:*:*:*:*:*:*:*21.1.2VulnerableOracle
cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*5.9.0.0.0VulnerableOracle
cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:*12.1.1VulnerableOracle
cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:*16.1.0 – 16.4.0VulnerableOracle
cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:*8.1.1VulnerableOracle
cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:*8.2.0VulnerableOracle
cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:*8.2.1VulnerableOracle
cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:*6.1 – 6.4VulnerableOracle
cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:*4.1 – 4.3VulnerableOracle
cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:*3.4VulnerableOracle
cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*7.0VulnerableOracle
cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:*8.1.1VulnerableOracle
cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:*8.2.0VulnerableOracle
cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:*8.2.1VulnerableOracle
cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:*8.1.1VulnerableOracle
cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:*8.2.0VulnerableOracle
cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:*8.2.1VulnerableOracle
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:*8.0.4VulnerableOracle
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7:*:*:*:*:*:*:*2.7VulnerableOracle
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.8:*:*:*:*:*:*:*2.8VulnerableOracle
cpe:2.3:a:oracle:health_sciences_inform:6.3.0:*:*:*:*:*:*:*6.3.0VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableOracle
cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:*3.4.0VulnerableOracle
cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:*11.1.2.4VulnerableOracle
cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*before 9.2.5.0VulnerableOracle
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*before 9.2.5.0VulnerableOracle
cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:*before 2.12.41VulnerableOracle
cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_resources:9.2:*:*:*:*:*:*:*9.2VulnerableOracle
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*16.2 – 16.2.11; 17.12.0 – 17.12.7; 18.8.0 – 18.8.9; 19.12.0 – 19.12.4VulnerableOracle
cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:*11.2.0.4VulnerableOracle
cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:*12.1.0.2VulnerableOracle
cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:*12.2.0.1VulnerableOracle
cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:*18cVulnerableOracle
cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:*19cVulnerableOracle
cpe:2.3:a:oracle:siebel_mobile:*:*:*:*:*:*:*:*up to 20.12VulnerableOracle
cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:*8.5.1VulnerableOracle
cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.1:*:*:*:*:*:*:*2.3.1VulnerableOracle
cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*12.1.3.0.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*14.1.1.0.0VulnerableOracle
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:hci_baseboard_management_controller:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:max_data:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*3.0 – 3.1.3VulnerableNetApp
cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:snapcenter_server:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*before 6.0.9VulnerableTenable
  • cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:* Versions before 21.1.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:blockchain_platform:21.1.2:*:*:*:*:*:*:* Versions 21.1.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:* Versions 5.9.0.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* Versions 12.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* Versions 16.1.0 – 16.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:* Versions 8.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* Versions 6.1 – 6.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:* Versions 4.1 – 4.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:* Versions 8.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:* Versions 8.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:* Versions 8.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7:*:*:*:*:*:*:* Versions 2.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.8:*:*:*:*:*:*:* Versions 2.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:health_sciences_inform:6.3.0:*:*:*:*:*:*:* Versions 6.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:* Versions 3.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:* Versions 11.1.2.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:* Versions before 9.2.5.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* Versions before 9.2.5.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:* Versions before 2.12.41 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_resources:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* Versions 16.2 – 16.2.11; 17.12.0 – 17.12.7; 18.8.0 – 18.8.9; 19.12.0 – 19.12.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* Versions 11.2.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* Versions 12.1.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* Versions 12.2.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* Versions 18c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:* Versions 19c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:siebel_mobile:*:*:*:*:*:*:*:* Versions up to 20.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* Versions 8.5.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* Versions 12.1.3.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* Versions 14.1.1.0.0 Vulnerable ·Oracle
  • cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:hci_baseboard_management_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:max_data:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* Versions 3.0 – 3.1.3 Vulnerable ·NetApp
  • cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:snapcenter_server:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* Versions before 6.0.9 Vulnerable ·Tenable

Remediation

  • Fix · CNA jQuery (jquery) Fixed in 3.5.0
  • Fix · GHSA-jpcq-cgw6-v4j6 jquery (npm) Fixed in 3.5.0 Advisory →
  • Fix · GHSA-jpcq-cgw6-v4j6 jquery-rails (RubyGems) Fixed in 4.4.0 Advisory →
  • Fix · GHSA-jpcq-cgw6-v4j6 jQuery (NuGet) Fixed in 3.5.0 Advisory →
  • Fix · GHSA-jpcq-cgw6-v4j6 org.webjars.npm:jquery (Maven) Fixed in 3.5.0 Advisory →
  • Fix · GHSA-jpcq-cgw6-v4j6 components/jquery (Packagist) Fixed in 3.5.0 Advisory →

Red Hat 63 advisories

  • RHSA-2025:2426 Released 2025-03-06 · Red Hat rating Moderate
    pki-core security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) pki-base-10.5.16-8.el7_7, pki-base-java-10.5.16-8.el7_7, pki-ca-10.5.16-8.el7_7 +5
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.7) pki-core-10.5.16-8.el7_7, pki-javadoc-10.5.16-8.el7_7
  • RHSA-2025:1983 Released 2025-03-05 · Red Hat rating Moderate
    Logging for Red Hat OpenShift - 5.8.18
    • RHOL 5.8 for RHEL 8 openshift-logging/kibana6-rhel8
  • RHSA-2025:1601 Released 2025-02-17 · Red Hat rating Moderate
    gcc security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) cpp-4.8.5-45.el7_9, gcc-4.8.5-45.el7_9, gcc-c++-4.8.5-45.el7_9 +31
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) gcc-go-4.8.5-45.el7_9, gcc-plugin-devel-4.8.5-45.el7_9, libasan-4.8.5-45.el7_9 +26
Show 60 more Red Hat advisories
  • RHSA-2025:1580 Released 2025-02-17 · Red Hat rating Moderate
    gcc security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) cpp-4.8.5-40.el7_7, gcc-4.8.5-40.el7_7, gcc-c++-4.8.5-40.el7_7 +19
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.7) gcc-go-4.8.5-40.el7_7, gcc-plugin-devel-4.8.5-40.el7_7, libasan-4.8.5-40.el7_7 +14
  • RHSA-2025:1514 Released 2025-02-17 · Red Hat rating Moderate
    ipa security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) ipa-4.6.5-11.el7_7.5, ipa-client-4.6.5-11.el7_7.5, ipa-client-common-4.6.5-11.el7_7.5 +9
  • RHSA-2025:1515 Released 2025-02-17 · Red Hat rating Moderate
    idm:DL1 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) bind-dyndb-ldap-11.2-3.module+el8.2.0+21753+7109ce90.3.src::idm:DL1, bind-dyndb-ldap-11.2-3.module+el8.2.0+21753+7109ce90.3.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +38
  • RHSA-2025:1346 Released 2025-02-12 · Red Hat rating Moderate
    gcc security update
    • Red Hat CodeReady Linux Builder (v. 9) gcc-plugin-devel-11.5.0-5.el9_5, libstdc++-static-11.5.0-5.el9_5
    • Red Hat Enterprise Linux AppStream (v. 9) cpp-11.5.0-5.el9_5, gcc-11.5.0-5.el9_5, gcc-c++-11.5.0-5.el9_5 +15
    • Red Hat Enterprise Linux BaseOS (v. 9) gcc-11.5.0-5.el9_5, libatomic-11.5.0-5.el9_5, libgcc-11.5.0-5.el9_5 +4
  • RHSA-2025:1342 Released 2025-02-12 · Red Hat rating Moderate
    gcc-toolset-13-gcc security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) gcc-toolset-13-gcc-13.3.1-2.2.el9_4, gcc-toolset-13-gcc-c++-13.3.1-2.2.el9_4, gcc-toolset-13-gcc-gfortran-13.3.1-2.2.el9_4 +17
  • RHSA-2025:1338 Released 2025-02-12 · Red Hat rating Moderate
    gcc-toolset-14-gcc security update
    • Red Hat Enterprise Linux AppStream (v. 8) gcc-toolset-14-gcc-14.2.1-7.1.el8_10, gcc-toolset-14-gcc-c++-14.2.1-7.1.el8_10, gcc-toolset-14-gcc-gfortran-14.2.1-7.1.el8_10 +17
  • RHSA-2025:1329 Released 2025-02-11 · Red Hat rating Moderate
    doxygen security update
    • Red Hat CodeReady Linux Builder (v. 9) doxygen-1:1.9.1-12.el9_5, doxygen-doxywizard-1:1.9.1-12.el9_5, doxygen-latex-1:1.9.1-12.el9_5
  • RHSA-2025:1301 Released 2025-02-11 · Red Hat rating Moderate
    gcc security update
    • Red Hat Enterprise Linux AppStream (v. 8) cpp-8.5.0-23.el8_10, gcc-8.5.0-23.el8_10, gcc-c++-8.5.0-23.el8_10 +8
    • Red Hat Enterprise Linux BaseOS (v. 8) gcc-8.5.0-23.el8_10, libasan-8.5.0-23.el8_10, libatomic-8.5.0-23.el8_10 +11
    • Red Hat Enterprise Linux CRB (v. 8) gcc-plugin-devel-8.5.0-23.el8_10, libgfortran-static-8.5.0-23.el8_10, libquadmath-static-8.5.0-23.el8_10 +1
  • RHSA-2025:1311 Released 2025-02-11 · Red Hat rating Moderate
    gcc security update
    • Red Hat CodeReady Linux Builder EUS (v.8.8) gcc-plugin-devel-8.5.0-18.3.el8_8, libstdc++-static-8.5.0-18.3.el8_8
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) cpp-8.5.0-18.3.el8_8, gcc-8.5.0-18.3.el8_8, gcc-c++-8.5.0-18.3.el8_8 +8
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) gcc-8.5.0-18.3.el8_8, libasan-8.5.0-18.3.el8_8, libatomic-8.5.0-18.3.el8_8 +11
  • RHSA-2025:1315 Released 2025-02-11 · Red Hat rating Moderate
    doxygen security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) doxygen-1:1.9.1-12.el9_4, doxygen-doxywizard-1:1.9.1-12.el9_4, doxygen-latex-1:1.9.1-12.el9_4
  • RHSA-2025:1314 Released 2025-02-11 · Red Hat rating Moderate
    doxygen security update
    • Red Hat Enterprise Linux CRB (v. 8) doxygen-1:1.8.14-13.el8_10, doxygen-doxywizard-1:1.8.14-13.el8_10, doxygen-latex-1:1.8.14-13.el8_10
  • RHSA-2025:1303 Released 2025-02-11 · Red Hat rating Moderate
    gcc security update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) gcc-plugin-devel-11.3.1-4.4.el9_2, libstdc++-static-11.3.1-4.4.el9_2
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) cpp-11.3.1-4.4.el9_2, gcc-11.3.1-4.4.el9_2, gcc-c++-11.3.1-4.4.el9_2 +15
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) gcc-11.3.1-4.4.el9_2, libatomic-11.3.1-4.4.el9_2, libgcc-11.3.1-4.4.el9_2 +4
  • RHSA-2025:1304 Released 2025-02-11 · Red Hat rating Moderate
    gcc security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) gcc-plugin-devel-11.4.1-4.el9_4, libstdc++-static-11.4.1-4.el9_4
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) cpp-11.4.1-4.el9_4, gcc-11.4.1-4.el9_4, gcc-c++-11.4.1-4.el9_4 +15
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) gcc-11.4.1-4.el9_4, libatomic-11.4.1-4.el9_4, libgcc-11.4.1-4.el9_4 +4
  • RHSA-2025:1309 Released 2025-02-11 · Red Hat rating Moderate
    gcc-toolset-13-gcc security update
    • Red Hat Enterprise Linux AppStream (v. 9) gcc-toolset-13-gcc-13.3.1-2.2.el9_5, gcc-toolset-13-gcc-c++-13.3.1-2.2.el9_5, gcc-toolset-13-gcc-gfortran-13.3.1-2.2.el9_5 +17
  • RHSA-2025:1308 Released 2025-02-11 · Red Hat rating Moderate
    gcc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) cpp-8.5.0-10.4.el8_6, gcc-8.5.0-10.4.el8_6, gcc-c++-8.5.0-10.4.el8_6 +7
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) cpp-8.5.0-10.4.el8_6, gcc-8.5.0-10.4.el8_6, gcc-c++-8.5.0-10.4.el8_6 +7
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) cpp-8.5.0-10.4.el8_6, gcc-8.5.0-10.4.el8_6, gcc-c++-8.5.0-10.4.el8_6 +7
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) gcc-8.5.0-10.4.el8_6, libasan-8.5.0-10.4.el8_6, libatomic-8.5.0-10.4.el8_6 +11
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) gcc-8.5.0-10.4.el8_6, libasan-8.5.0-10.4.el8_6, libatomic-8.5.0-10.4.el8_6 +11
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) gcc-8.5.0-10.4.el8_6, libasan-8.5.0-10.4.el8_6, libatomic-8.5.0-10.4.el8_6 +11
  • RHSA-2025:1312 Released 2025-02-11 · Red Hat rating Moderate
    gcc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) cpp-8.4.1-1.4.el8_4, gcc-8.4.1-1.4.el8_4, gcc-c++-8.4.1-1.4.el8_4 +7
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) cpp-8.4.1-1.4.el8_4, gcc-8.4.1-1.4.el8_4, gcc-c++-8.4.1-1.4.el8_4 +7
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) cpp-8.4.1-1.4.el8_4, gcc-8.4.1-1.4.el8_4, gcc-c++-8.4.1-1.4.el8_4 +7
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) gcc-8.4.1-1.4.el8_4, libasan-8.4.1-1.4.el8_4, libatomic-8.4.1-1.4.el8_4 +11
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) gcc-8.4.1-1.4.el8_4, libasan-8.4.1-1.4.el8_4, libatomic-8.4.1-1.4.el8_4 +11
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) gcc-8.4.1-1.4.el8_4, libasan-8.4.1-1.4.el8_4, libatomic-8.4.1-1.4.el8_4 +11
  • RHSA-2025:1306 Released 2025-02-11 · Red Hat rating Moderate
    gcc-toolset-13-gcc security update
    • Red Hat Enterprise Linux AppStream (v. 8) gcc-toolset-13-gcc-13.3.1-2.2.el8_10, gcc-toolset-13-gcc-c++-13.3.1-2.2.el8_10, gcc-toolset-13-gcc-gfortran-13.3.1-2.2.el8_10 +17
  • RHSA-2025:1300 Released 2025-02-11 · Red Hat rating Moderate
    gcc-toolset-14-gcc security update
    • Red Hat Enterprise Linux AppStream (v. 9) gcc-toolset-14-gcc-14.2.1-1.3.el9_5, gcc-toolset-14-gcc-c++-14.2.1-1.3.el9_5, gcc-toolset-14-gcc-gfortran-14.2.1-1.3.el9_5 +17
  • RHSA-2025:1305 Released 2025-02-11 · Red Hat rating Moderate
    gcc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) cpp-11.2.1-9.5.el9_0, gcc-11.2.1-9.5.el9_0, gcc-c++-11.2.1-9.5.el9_0 +15
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) gcc-11.2.1-9.5.el9_0, libatomic-11.2.1-9.5.el9_0, libgcc-11.2.1-9.5.el9_0 +4
  • RHSA-2025:1310 Released 2025-02-11 · Red Hat rating Moderate
    gcc security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) cpp-8.3.1-8.el8_2, gcc-8.3.1-8.el8_2, gcc-c++-8.3.1-8.el8_2 +7
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) gcc-8.3.1-8.el8_2, libasan-8.3.1-8.el8_2, libatomic-8.3.1-8.el8_2 +11
  • RHSA-2025:1255 Released 2025-02-10 · Red Hat rating Moderate
    doxygen security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) doxygen-1:1.8.5-4.el7_9.1
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) doxygen-doxywizard-1:1.8.5-4.el7_9.1, doxygen-latex-1:1.8.5-4.el7_9.1
  • RHSA-2025:1256 Released 2025-02-10 · Red Hat rating Moderate
    doxygen security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) doxygen-1:1.8.5-3.el7_7.1
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.7) doxygen-doxywizard-1:1.8.5-3.el7_7.1, doxygen-latex-1:1.8.5-3.el7_7.1
  • RHSA-2025:1247 Released 2025-02-10 · Red Hat rating Moderate
    doxygen security update
    • Red Hat CodeReady Linux Builder EUS (v.8.8) doxygen-1:1.8.14-13.el8_8, doxygen-doxywizard-1:1.8.14-13.el8_8, doxygen-latex-1:1.8.14-13.el8_8
  • RHSA-2025:1249 Released 2025-02-10 · Red Hat rating Important
    updated discovery container images
    • Discovery 1 for RHEL 9 discovery/discovery-server-rhel9, discovery/discovery-ui-rhel9
  • RHSA-2025:1211 Released 2025-02-10 · Red Hat rating Moderate
    tbb security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) python3-tbb-2020.3-8.el9_4.1, tbb-2020.3-8.el9_4.1, tbb-devel-2020.3-8.el9_4.1 +1
  • RHSA-2025:1216 Released 2025-02-10 · Red Hat rating Moderate
    tbb security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) python3-tbb-2018.2-10.el8_6.1, tbb-2018.2-10.el8_6.1, tbb-devel-2018.2-10.el8_6.1 +1
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) python3-tbb-2018.2-10.el8_6.1, tbb-2018.2-10.el8_6.1, tbb-devel-2018.2-10.el8_6.1 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) python3-tbb-2018.2-10.el8_6.1, tbb-2018.2-10.el8_6.1, tbb-devel-2018.2-10.el8_6.1 +1
  • RHSA-2025:1214 Released 2025-02-10 · Red Hat rating Moderate
    tbb security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) python3-tbb-2018.2-10.el8_8.1, tbb-2018.2-10.el8_8.1, tbb-devel-2018.2-10.el8_8.1 +1
  • RHSA-2025:1212 Released 2025-02-10 · Red Hat rating Moderate
    tbb security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) python3-tbb-2018.2-10.el8_4.1, tbb-2018.2-10.el8_4.1, tbb-devel-2018.2-10.el8_4.1 +1
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) python3-tbb-2018.2-10.el8_4.1, tbb-2018.2-10.el8_4.1, tbb-devel-2018.2-10.el8_4.1 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) python3-tbb-2018.2-10.el8_4.1, tbb-2018.2-10.el8_4.1, tbb-devel-2018.2-10.el8_4.1 +1
  • RHSA-2025:1217 Released 2025-02-10 · Red Hat rating Moderate
    tbb security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) python3-tbb-2018.2-9.el8_2.1, tbb-2018.2-9.el8_2.1, tbb-devel-2018.2-9.el8_2.1 +1
  • RHSA-2025:1215 Released 2025-02-10 · Red Hat rating Moderate
    tbb security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3-tbb-2018.2-10.el8_10.1, tbb-2018.2-10.el8_10.1, tbb-devel-2018.2-10.el8_10.1 +1
  • RHSA-2025:1213 Released 2025-02-10 · Red Hat rating Moderate
    tbb security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) python3-tbb-2020.3-8.el9_0.1, tbb-2020.3-8.el9_0.1, tbb-devel-2020.3-8.el9_0.1 +1
  • RHSA-2025:1210 Released 2025-02-10 · Red Hat rating Moderate
    tbb security update
    • Red Hat Enterprise Linux AppStream (v. 9) python3-tbb-2020.3-8.el9_5.1, tbb-2020.3-8.el9_5.1, tbb-devel-2020.3-8.el9_5.1 +1
  • RHSA-2025:1209 Released 2025-02-10 · Red Hat rating Moderate
    tbb security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) python3-tbb-2020.3-8.el9_2.1, tbb-2020.3-8.el9_2.1, tbb-devel-2020.3-8.el9_2.1 +1
  • RHSA-2025:1185 Released 2025-02-10 · Red Hat rating Moderate
    doxygen security update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) doxygen-1:1.9.1-12.el9_2, doxygen-doxywizard-1:1.9.1-12.el9_2, doxygen-latex-1:1.9.1-12.el9_2
  • RHSA-2025:1070 Released 2025-02-05 · Red Hat rating Moderate
    Red Hat OpenStack Platform 16.2 (python-django20) security update
    • Red Hat OpenStack Platform 16.2 python-django20-2.0.13-19.el8ost, python3-django20-2.0.13-19.el8ost
  • RHSA-2023:1043 Released 2023-03-01 · Red Hat rating Important
    Red Hat Single Sign-On 7.6.2 security update on RHEL 7
    • Red Hat Single Sign-On 7.6 for RHEL 7 Server rh-sso7-keycloak-18.0.6-1.redhat_00001.1.el7sso, rh-sso7-keycloak-server-18.0.6-1.redhat_00001.1.el7sso
  • RHSA-2023:1049 Released 2023-03-01 · Red Hat rating Important
    Red Hat Single Sign-On 7.6.2 security update
    • Red Hat Single Sign-On 7
  • RHSA-2023:1045 Released 2023-03-01 · Red Hat rating Important
    Red Hat Single Sign-On 7.6.2 security update on RHEL 9
    • Red Hat Single Sign-On 7.6 for RHEL 9 rh-sso7-keycloak-18.0.6-1.redhat_00001.1.el9sso, rh-sso7-keycloak-server-18.0.6-1.redhat_00001.1.el9sso
  • RHSA-2023:1044 Released 2023-03-01 · Red Hat rating Important
    Red Hat Single Sign-On 7.6.2 security update on RHEL 8
    • Red Hat Single Sign-On 7.6 for RHEL 8 rh-sso7-keycloak-18.0.6-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-18.0.6-1.redhat_00001.1.el8sso
  • RHSA-2023:0556 Released 2023-01-31 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.9 Security update
    • Red Hat JBoss Enterprise Application Platform 7.4.9 com.fasterxml.jackson.core.jackson-databind-2.12.7.redhat-00003.jar, com.fasterxml.woodstox.woodstox-core-6.4.0.redhat-00001.jar, org.apache.cxf.cxf-core-3.4.10.redhat-00001.jar +4
  • RHSA-2023:0554 Released 2023-01-31 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.9 Security update
    • Red Hat JBoss EAP 7.4 for RHEL 9 eap7-apache-sshd-2.9.2-1.redhat_00001.1.el9eap, eap7-elytron-web-1.9.3-1.Final_redhat_00001.1.el9eap, eap7-hal-console-3.3.16-1.Final_redhat_00001.1.el9eap +44
  • RHSA-2023:0552 Released 2023-01-31 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.9 Security update
    • Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-apache-sshd-2.9.2-1.redhat_00001.1.el7eap, eap7-elytron-web-1.9.3-1.Final_redhat_00001.1.el7eap, eap7-hal-console-3.3.16-1.Final_redhat_00001.1.el7eap +46
  • RHSA-2023:0553 Released 2023-01-31 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.9 Security update
    • Red Hat JBoss EAP 7.4 for RHEL 8 eap7-apache-sshd-2.9.2-1.redhat_00001.1.el8eap, eap7-elytron-web-1.9.3-1.Final_redhat_00001.1.el8eap, eap7-hal-console-3.3.16-1.Final_redhat_00001.1.el8eap +44
  • RHSA-2022:7343 Released 2022-11-02 · Red Hat rating Important
    pcs security update
    • Red Hat Enterprise Linux Server High Availability (v. 7) pcs-0.9.169-3.el7_9.3, pcs-snmp-0.9.169-3.el7_9.3
    • Red Hat Enterprise Linux Server Resilient Storage (v. 7) pcs-0.9.169-3.el7_9.3, pcs-snmp-0.9.169-3.el7_9.3
  • RHSA-2022:6393 Released 2022-09-08 · Red Hat rating Important
    RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update
    • RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-4.5.2.4-0.1.el8ev, ovirt-engine-backend-4.5.2.4-0.1.el8ev, ovirt-engine-dbscripts-4.5.2.4-0.1.el8ev +20
  • RHSA-2021:4142 Released 2021-11-09 · Red Hat rating Low
    pcs security, bug fix, and enhancement update
    • Red Hat Enterprise Linux High Availability (v. 8) pcs-0.10.10-4.el8, pcs-snmp-0.10.10-4.el8
    • Red Hat Enterprise Linux Resilient Storage (v. 8) pcs-0.10.10-4.el8, pcs-snmp-0.10.10-4.el8
  • RHSA-2021:1846 Released 2021-05-18 · Red Hat rating Moderate
    idm:DL1 and idm:client security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.aarch64::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.ppc64le::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.s390x::idm:DL1 +47
  • RHSA-2021:0860 Released 2021-03-16 · Red Hat rating Moderate
    ipa security and bug fix update
    • Red Hat Enterprise Linux Client (v. 7) ipa-4.6.8-5.el7_9.4, ipa-client-4.6.8-5.el7_9.4, ipa-client-common-4.6.8-5.el7_9.4 +4
    • Red Hat Enterprise Linux Client Optional (v. 7) ipa-server-4.6.8-5.el7_9.4, ipa-server-common-4.6.8-5.el7_9.4, ipa-server-dns-4.6.8-5.el7_9.4 +2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-server-4.6.8-5.el7_9.4, ipa-server-common-4.6.8-5.el7_9.4, ipa-server-dns-4.6.8-5.el7_9.4 +2
    • Red Hat Enterprise Linux Server (v. 7) ipa-4.6.8-5.el7_9.4, ipa-client-4.6.8-5.el7_9.4, ipa-client-common-4.6.8-5.el7_9.4 +9
    • Red Hat Enterprise Linux Workstation (v. 7) ipa-4.6.8-5.el7_9.4, ipa-client-4.6.8-5.el7_9.4, ipa-client-common-4.6.8-5.el7_9.4 +9
  • RHSA-2021:0851 Released 2021-03-16 · Red Hat rating Important
    pki-core security and bug fix update
    • Red Hat Enterprise Linux Client Optional (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +6
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +6
    • Red Hat Enterprise Linux Server (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +5
    • Red Hat Enterprise Linux Server Optional (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +6
    • Red Hat Enterprise Linux Workstation (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +5
    • Red Hat Enterprise Linux Workstation Optional (v. 7) pki-javadoc-10.5.18-12.el7_9
  • RHSA-2021:0778 Released 2021-03-09 · Red Hat rating Important
    Red Hat Ansible Tower 3.6.7-1 - Container security and bug fix update
    • Red Hat Ansible Tower 3.6 for RHEL 7 ansible-tower-36/ansible-tower
  • RHSA-2020:5412 Released 2020-12-15 · Red Hat rating Moderate
    python-XStatic-jQuery224 security update
    • Red Hat OpenStack Platform 16.1 python-XStatic-jQuery224-2.2.4.1-3.el8ost, python3-XStatic-jQuery224-2.2.4.1-3.el8ost
  • RHSA-2020:5249 Released 2020-11-30 · Red Hat rating Moderate
    security update - Red Hat Ansible Tower 3.7.4-1 - RHEL7 Container
    • Red Hat Ansible Tower 3.7 for RHEL 7 ansible-tower-37/ansible-tower-rhel7
  • RHSA-2020:4847 Released 2020-11-04 · Red Hat rating Moderate
    pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6, apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6, apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6 +47
  • RHSA-2020:4298 Released 2020-10-27 · Red Hat rating Moderate
    OpenShift Container Platform 4.6.1 image security update
    • Red Hat OpenShift Container Platform 4.6 openshift4/ose-ansible-operator, openshift4/ose-aws-machine-controllers, openshift4/ose-azure-machine-controllers +47
  • RHSA-2020:4211 Released 2020-10-08 · Red Hat rating Moderate
    Red Hat AMQ Interconnect 1.9.0 release and security update
    • Red Hat AMQ Interconnect 1 qpid-dispatch-1.13.0-3.el6_10, qpid-dispatch-1.13.0-3.el7, qpid-dispatch-1.13.0-3.el8 +12
  • RHSA-2020:3807 Released 2020-09-23 · Red Hat rating Moderate
    Red Hat Virtualization security, bug fix, and enhancement update
    • RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-4.4.2.3-0.6.el8ev, ovirt-engine-backend-4.4.2.3-0.6.el8ev, ovirt-engine-dbscripts-4.4.2.3-0.6.el8ev +19
  • RHSA-2020:3369 Released 2020-08-06 · Red Hat rating Moderate
    Red Hat OpenShift Service Mesh security update
    • OpenShift Service Mesh 1.1 ior-1.1.6-1.el8, servicemesh-1.1.6-1.el8, servicemesh-citadel-1.1.6-1.el8 +12
    • Red Hat OpenShift Service Mesh 1.1 kiali-v1.12.10.redhat2-1.el7
  • RHSA-2020:3247 Released 2020-08-04 · Red Hat rating Important
    RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update
    • RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 novnc-1.1.0-1.el8ost, ovirt-engine-4.4.1.8-0.7.el8ev, ovirt-engine-api-explorer-0.0.6-1.el8ev +21
  • RHSA-2020:2412 Released 2020-07-13 · Red Hat rating Moderate
    OpenShift Container Platform 4.5 container image security update
    • Red Hat OpenShift Container Platform 4.5 openshift4/ose-cluster-logging-operator, openshift4/ose-console, openshift4/ose-hyperkube +2
  • RHSA-2020:2813 Released 2020-07-02 · Red Hat rating Important
    Red Hat Single Sign-On 7.4.1 security update
    • Red Hat Single Sign-On 7.4.1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
CloudForms Management Engine 5AffectedNo fix planned: Out of support scope
Red Hat Ceph Storage 3AffectedNo fix planned: Out of support scope
Red Hat Ceph Storage 4AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Fuse 7AffectedNo fix planned: Out of support scope
Red Hat JBoss Data Grid 7AffectedNo fix planned: Out of support scope
Red Hat OpenShift Container Platform 3.11AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 15 (Stein)AffectedNo fix planned: Out of support scope
Red Hat Software CollectionsAffectedNo fix planned: Out of support scope
Red Hat Storage 3AffectedNo fix planned: Out of support scope
Red Hat Virtualization 4AffectedNo fix planned: Out of support scope
Discovery 1 for RHEL 9Fixed RHSA-2025:1249
OpenShift Service Mesh 1.1Fixed RHSA-2020:3369
Quay v3Fixed—
RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4Fixed RHSA-2020:3247, RHSA-2020:3807, RHSA-2022:6393
RHOL 5.8 for RHEL 8Fixed RHSA-2025:1983
Red Hat AMQ Interconnect 1Fixed RHSA-2020:4211
Red Hat Ansible Tower 3.6 for RHEL 7Fixed RHSA-2021:0778
Red Hat Ansible Tower 3.7 for RHEL 7Fixed RHSA-2020:5249
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2025:1329, RHSA-2025:1346
Red Hat CodeReady Linux Builder EUS (v.8.8)Fixed RHSA-2025:1247, RHSA-2025:1311
Red Hat CodeReady Linux Builder EUS (v.9.2)Fixed RHSA-2025:1185, RHSA-2025:1303
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2025:1304, RHSA-2025:1315
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2020:4847, RHSA-2021:1846, RHSA-2025:1215, RHSA-2025:1301, RHSA-2025:1306, RHSA-2025:1338
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:1210, RHSA-2025:1300, RHSA-2025:1309, RHSA-2025:1346
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2025:1217, RHSA-2025:1310, RHSA-2025:1515
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:1212, RHSA-2025:1312
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:1216, RHSA-2025:1308
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2025:1212, RHSA-2025:1312
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:1216, RHSA-2025:1308
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:1213, RHSA-2025:1305
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2025:1214, RHSA-2025:1311
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2025:1209, RHSA-2025:1303
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:1211, RHSA-2025:1304, RHSA-2025:1342
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2025:1212, RHSA-2025:1312
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:1216, RHSA-2025:1308
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2025:1301
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2025:1346
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2025:1310
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2025:1312
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2025:1308
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2025:1312
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2025:1308
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2025:1305
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2025:1311
Red Hat Enterprise Linux BaseOS EUS (v.9.2)Fixed RHSA-2025:1303
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2025:1304
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2025:1312
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2025:1308
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2025:1301, RHSA-2025:1314
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2021:0860
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2021:0851, RHSA-2021:0860
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2021:0851, RHSA-2021:0860
Red Hat Enterprise Linux High Availability (v. 8)Fixed RHSA-2021:4142
Red Hat Enterprise Linux Resilient Storage (v. 8)Fixed RHSA-2021:4142
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:1255, RHSA-2025:1601
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2021:0851, RHSA-2021:0860
Red Hat Enterprise Linux Server AUS (v. 7.7)Fixed RHSA-2025:1256, RHSA-2025:1514, RHSA-2025:1580, RHSA-2025:2426
Red Hat Enterprise Linux Server High Availability (v. 7)Fixed RHSA-2022:7343
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:1255, RHSA-2025:1601
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2021:0851
Red Hat Enterprise Linux Server Optional AUS (v. 7.7)Fixed RHSA-2025:1256, RHSA-2025:1580, RHSA-2025:2426
Red Hat Enterprise Linux Server Resilient Storage (v. 7)Fixed RHSA-2022:7343
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2021:0851, RHSA-2021:0860
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2021:0851
Red Hat JBoss EAP 7.4 for RHEL 7 ServerFixed RHSA-2023:0552
Red Hat JBoss EAP 7.4 for RHEL 8Fixed RHSA-2023:0553
Red Hat JBoss EAP 7.4 for RHEL 9Fixed RHSA-2023:0554
Red Hat JBoss Enterprise Application Platform 7.4.9Fixed RHSA-2023:0556
Red Hat OpenShift Container Platform 4.5Fixed RHSA-2020:2412
Red Hat OpenShift Container Platform 4.6Fixed RHSA-2020:4298
Red Hat OpenShift Service Mesh 1.1Fixed RHSA-2020:3369
Red Hat OpenStack Platform 16.1Fixed RHSA-2020:5412
Red Hat OpenStack Platform 16.2Fixed RHSA-2025:1070
Red Hat Single Sign-On 7Fixed RHSA-2023:1049
Red Hat Single Sign-On 7.4.1Fixed RHSA-2020:2813
Red Hat Single Sign-On 7.6 for RHEL 7 ServerFixed RHSA-2023:1043
Red Hat Single Sign-On 7.6 for RHEL 8Fixed RHSA-2023:1044
Red Hat Single Sign-On 7.6 for RHEL 9Fixed RHSA-2023:1045
Red Hat build of Keycloak 26.2Fixed—
Not affected: 32 products
  • RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
  • Red Hat 3scale API Management Platform 2
  • Red Hat Build of Keycloak
  • Red Hat Certificate System 10
  • Red Hat Certification for Red Hat Enterprise Linux 7
  • Red Hat Data Grid 8
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • Red Hat JBoss EAP 7.4 for RHEL 8
  • Red Hat JBoss EAP 7.4 for RHEL 9
  • Red Hat JBoss Enterprise Application Platform 7
  • Red Hat JBoss Enterprise Application Platform 7.4.9
  • Red Hat JBoss Enterprise Application Platform 8
  • Red Hat JBoss Enterprise Application Platform Expansion Pack
  • Red Hat OpenShift Container Platform 3.11
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.5
  • Red Hat OpenShift Container Platform 4.6
  • Red Hat OpenStack Platform 10 (Newton)
  • Red Hat OpenStack Platform 13 (Queens)
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Process Automation 7
  • Red Hat Single Sign-On 7
  • Red Hat build of Apache Camel - HawtIO 4
  • Red Hat build of Apache Camel for Spring Boot 4
  • Red Hat build of OptaPlanner 8

Timeline

  1. 2025-01-23 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2020-11023
  3. 2026-10-03 Alias added: GHSA-jpcq-cgw6-v4j6
  4. 2026-10-23 Fix available: Discovery 1 for RHEL 9, OpenShift Service Mesh 1.1, Quay v3 +65 · Red Hat
  5. 2026-10-23 CVSS score added · Red Hat
  6. 2026-10-30 Fix available: Red Hat build of Keycloak 26.2 · Red Hat

References

Exploit 1

Patch 5

Advisory 24

Other 95

  • TI-2020-08896 jQuery has a potential XSS vulnerability CVSS 3.1MEDIUM 6.9
  • TI-2019-08480 jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles… CVSS 3.1MEDIUM 6.1
  • TI-2015-07630 jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a… CVSS 3.0MEDIUM 6.1
  • TI-2016-08748 jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that… CVSS 3.1HIGH 7.5
  • TI-2012-05410 jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. CVSS 3.0MEDIUM 6.1
  • TI-2011-04277 Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash… CVSS 2.0MEDIUM 4.3
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences