Lucene search
AcarrozzoATLASSIAN:JRASERVER-43422HistoryMay 18, 2015 - 9:31 a.m.
The jQuery version used in JIRA needs to be updated
2015-05-1809:31:54
acarrozzo
jira.atlassian.com
129
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
77.3%
{panel:bgColor=#e7f4fa}
NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? [See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-43422].
{panel}
Actually the jQuery version used in JIRA is still using the function jQuery.browser which is deprecated and has been removed since jQuery 1.9.
In our plugins, we are using a newer version of jQuery but this causes conflicts between the two different versions breaking the new menu navigation.
Related
securityvulns
securityvulns
[SECURITY] [DSA 3249-1] jqueryui security update
2015-05-11 00:00:00
nessus
nessus
Fedora 20 : couchdb-1.6.1-4.fc20 (2014-16048)
2014-12-15 00:00:00
Debian DLA-258-1 : jqueryui security update
2015-06-30 00:00:00
Fedora 21 : couchdb-1.6.1-4.fc21 (2014-15967)
2014-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: couchdb-1.6.1-4.fc21
2014-12-12 04:12:51
[SECURITY] Fedora 20 Update: couchdb-1.6.1-4.fc20
2014-12-12 04:03:17
[SECURITY] Fedora 37 Update: drupal7-7.92-1.fc37
2022-11-10 22:46:29
ubuntucve
ubuntucve
CVE-2010-5312
2014-11-24 00:00:00
CVE-2015-9251
2018-01-18 00:00:00
prion
prion
Cross site scripting
2014-11-24 16:59:00
Cross site scripting
2018-01-18 23:29:00
github
github
Cross-site Scripting in jquery-ui
2017-10-24 18:33:38
Cross-Site Scripting (XSS) in jquery
2018-01-22 13:32:06
atlassian
atlassian
The jQuery version used in JIRA needs to be updated
2015-05-18 09:31:54
Jira uses vulnerable jQuery version CVE-2015-9251
2020-04-20 13:29:57
Update jQuery to avoid CVE-2020-11022, CVE-2020-11023, and CVE-2015-9251
2021-02-16 18:28:38
cvelist
cvelist
CVE-2010-5312
2014-11-24 00:00:00
CVE-2015-9251
2018-01-18 23:00:00
openvas
openvas
Fedora Update for couchdb FEDORA-2014-16048
2014-12-12 00:00:00
Fedora Update for couchdb FEDORA-2014-15967
2015-01-05 00:00:00
Oracle Database Server Unspecified Vulnerability (Oct 2016)
2016-10-21 00:00:00
cve
cve
alpinelinux
alpinelinux
veracode
veracode
Cross-site Scripting (XSS)
2019-01-15 09:06:57
osv
osv
Cross-site Scripting in jquery-ui
2017-10-24 18:33:38
jqueryui - security update
2015-05-03 00:00:00
Cross-Site Scripting (XSS) in jquery
2018-01-22 13:32:06
ibm
ibm
f5
f5
K29562170 : jQuery vulnerability CVE-2015-9251
2020-02-19 00:00:00
K51110104 : XSS vulnerabilities CVE-2010-5312 and CVE-2012-6662
2017-07-19 00:00:00
ics
ics
AVEVA InTouch Access Anywhere
2018-07-31 12:00:00
Philips Vue PACS (Update C)
2023-02-21 12:00:00
Pepperl+Fuchs WirelessHART-Gateway
2022-04-07 12:00:00
mageia
mageia
Updated couchdb packages fix CVE-2010-5312
2014-12-31 15:28:04
debian
debian
[SECURITY] [DSA 3249-1] jqueryui security update
2015-05-03 14:28:26
[SECURITY] [DSA 3249-1] jqueryui security update
2015-05-03 14:28:46
[SECURITY] [DLA 258-1] jqueryui security update
2015-06-29 20:30:26
debiancve
debiancve
CVE-2010-5312
2014-11-24 16:59:00
CVE-2015-9251
2018-01-18 23:29:00
attackerkb
attackerkb
CVE-2015-9251
2018-01-18 00:00:00
cloudfoundry
cloudfoundry
CVE-2015-9251: UAA contains vulnerable jQuery version | Cloud Foundry
2019-07-08 00:00:00
freebsd
freebsd
rt -- XSS via jQuery
2019-03-05 00:00:00
RDoc -- multiple jQuery vulnerabilities
2019-08-28 00:00:00
oraclelinux
oraclelinux
ipa security and bug fix update
2015-07-28 00:00:00
ipa security, bug fix, and enhancement update
2015-03-11 00:00:00
ipa security, bug fix, and enhancement update
2020-10-06 00:00:00
centos
centos
ipa security update
2015-07-26 14:13:07
ipa security update
2015-03-17 13:28:21
ipa, python2 security update
2020-10-20 18:15:27
laminas
laminas
XSS and RCE vectors in laminas-api-tools/api-tools-documentation-swagger
2020-04-01 21:30:00
XSS vectors in laminas-api-tools/api-tools
2020-04-01 21:30:00
redhat
redhat
(RHSA-2015:0442) Moderate: ipa security, bug fix, and enhancement update
2015-03-05 00:00:00
(RHSA-2015:1462) Moderate: ipa security and bug fix update
2015-07-22 00:00:00
hackerone
hackerone
Ruby: Ruby is shipping a vulnerable jQuery
2019-03-30 14:10:34
fortinet
fortinet
Protect
2019-04-10 00:00:00
archlinux
archlinux
[ASA-201910-4] ruby-rdoc: cross-site scripting
2019-10-02 00:00:00
[ASA-201910-5] ruby2.5: multiple issues
2019-10-02 00:00:00
threatpost
threatpost
Oracle Fixes 253 Vulnerabilities in Last CPU of 2016
2016-10-19 13:39:40
drupal
drupal
Drupal core - Moderately critical - Cross site scripting - SA-CORE-2022-002
2022-01-19 00:00:00
suse
suse
Recommended update for ruby2.5 (important)
2020-03-28 00:00:00
amazon
amazon
Important: ruby24
2020-08-26 23:09:00
Medium: ipa
2020-10-22 17:40:00
rocky
rocky
idm:DL1 and idm:client security, bug fix, and enhancement update
2020-11-03 12:25:36
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2020-11-03 12:29:58
almalinux
almalinux
thn
thn
Critical Flaws Reported in Philips Vue PACS Medical Imaging Systems
2021-07-09 07:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
77.3%
Related for ATLASSIAN:JRASERVER-43422