The version of jQuery used in Jira before 8.2.3 was vulnerable to CVE-2019-11358. This issue was addressed by updating Jira server to use a patched & custom version of jQuery (2.2.4.7).

CPENameOperatorVersion
jira server and data centerlt8.3.0
jira server and data centerlt8.2.3
jira server and data centerle8.1.0

Name	Operator	Version
jira server and data center	lt	8.3.0
jira server and data center	lt	8.2.3
jira server and data center	le	8.1.0

osv 10

atlassian 8

openvas 23

githubexploit 5

ibm 35

redhatcve 1

cve 2

prion 1

nessus 53

f5 1

typo3 1

symantec 1

debian 6

redhat 11

github 1

alpinelinux 1

veracode 1

joomla 1

drupal 1

debiancve 1

hackerone 1

ubuntucve 1

checkpoint_advisories 1

fedora 10

amazon 2

cnvd 1

archlinux 1

freebsd 2

attackerkb 1

oraclelinux 4

altlinux 2

rocky 2

suse 2

centos 1

almalinux 2

mageia 1

ics 1

osv

drupal7 - security update

2019-04-20 00:00:00

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

2019-04-26 16:29:11

jquery - security update

2019-05-06 00:00:00

atlassian

Address CVE-2019-11358 in the bundled version of jQuery

2019-07-08 22:50:18

Address CVE-2019-11358 in the bundled version of jQuery

2019-07-08 22:50:18

Address CVE-2019-11358 in the bundled version of jQuery

2019-07-08 22:57:45

openvas

Drupal jQuery XSS Vulnerability (SA-CORE-2019-006) (Windows)

2019-04-24 00:00:00

Debian Security Advisory DSA 4434-1 (drupal7 - security update)

2019-04-21 00:00:00

Fedora Update for drupal7 FEDORA-2019-2a0ce0c58c

2019-05-09 00:00:00

githubexploit

Exploit for Prototype Pollution in Jquery

2019-07-18 19:15:33

Exploit for Prototype Pollution in Jquery

2021-03-08 11:34:11

Exploit for Prototype Pollution in Jquery

2020-12-01 09:18:58

ibm

Security Bulletin: A security vulnerability has been idenfied in jQuery which affects DataQuant for z/OS (CVE-2019-11358)

2021-02-12 21:24:38

Security Bulletin: The IBM® Engineering Lifecycle Engineering product using jQuery 3.2.1 is vulnerable to Cross Site Scripting - CVE-2019-11358

2023-10-04 10:40:15

Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting (CVE-2019-11358)

2019-12-06 20:52:02

redhatcve

CVE-2019-11358

2021-07-18 00:15:31

cve

CVE-2019-11358

2019-04-20 00:29:00

CVE-2019-5428

2019-04-22 21:29:00

prion

Design/Logic Flaw

2019-04-20 00:29:00

nessus

RHEL 8 : python-XStatic-jQuery (RHSA-2020:1325)

2020-04-07 00:00:00

Debian DLA-2118-1 : otrs2 security update

2020-02-25 00:00:00

Amazon Linux 2 : pcs (ALAS-2023-1905)

2023-01-24 00:00:00

K20455158 : jQuery vulnerability CVE-2019-11358

2020-04-14 00:00:00

typo3

Cross-Site Scripting in jQuery before 3.4.0

2019-05-07 00:00:00

symantec

JQuery CVE-2019-11358 Cross Site Scripting Vulnerability

2019-04-17 00:00:00

debian

[SECURITY] [DLA 1777-1] jquery security update

2019-05-06 07:42:05

[SECURITY] [DLA 2118-1] otrs2 security update

2020-02-24 17:03:32

[SECURITY] [DSA 4434-1] drupal7 security update

2019-04-20 12:03:09

redhat

(RHSA-2020:1325) Moderate: python-XStatic-jQuery security update

2020-04-06 08:40:52

(RHSA-2020:5581) Moderate: python-XStatic-jQuery security update

2020-12-16 12:57:14

(RHSA-2019:2587) Moderate: CloudForms 4.7.9 security, bug fix and enhancement update

2019-09-05 05:18:52

github

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

2019-04-26 16:29:11

alpinelinux

CVE-2019-11358

2019-04-20 00:29:00

veracode

Prototype Pollution

2019-04-22 03:41:01

joomla

[20190403] - Core - Object.prototype pollution in JQuery $.extend

2019-03-25 00:00:00

drupal

Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-006

2019-04-17 00:00:00

debiancve

CVE-2019-11358

2019-04-20 00:29:00

hackerone

Node.js third-party modules: Prototype pollution attack through jQuery $.extend

2018-12-03 15:53:20

ubuntucve

CVE-2019-11358

2019-04-20 00:00:00

checkpoint_advisories

jQuery Prototype Pollution Object Cross-Site Scripting (CVE-2019-11358)

2019-04-29 00:00:00

fedora

[SECURITY] Fedora 30 Update: drupal7-7.66-1.fc30

2019-05-09 01:34:20

[SECURITY] Fedora 29 Update: drupal7-7.66-1.fc29

2019-05-09 03:18:10

[SECURITY] Fedora 30 Update: drupal7-7.69-1.fc30

2020-01-04 22:16:18

amazon

Medium: pcs

2023-01-18 00:16:00

Medium: ipa

2020-10-22 17:40:00

cnvd

Silverstripe framework cross-site scripting vulnerability

2022-11-23 00:00:00

archlinux

[ASA-201906-2] python-django: cross-site scripting

2019-06-04 00:00:00

freebsd

Django -- AdminURLFieldWidget XSS

2019-06-03 00:00:00

mediawiki -- multiple vulnerabilities

2019-04-23 00:00:00

attackerkb

CVE-2019-11358

2019-04-20 00:00:00

oraclelinux

pcs security update

2022-11-03 00:00:00

idm:DL1 and idm:client security, bug fix, and enhancement update

2020-11-10 00:00:00

ipa security, bug fix, and enhancement update

2020-10-06 00:00:00

altlinux

Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1

2020-10-21 00:00:00

Security fix for the ALT Linux 9 package mediawiki version 1.32.2-alt1

2019-06-13 00:00:00

rocky

pcs security, bug fix, and enhancement update

2021-11-09 08:21:49

idm:DL1 and idm:client security, bug fix, and enhancement update

2020-11-03 12:25:36

suse

Security update for python-Django (moderate)

2019-08-14 00:00:00

Security update for python-Django (moderate)

2019-08-08 00:00:00

centos

ipa, python2 security update

2020-10-20 18:15:27

almalinux

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

2020-11-03 12:25:36

Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

2020-11-03 12:29:58

mageia

Updated mediawiki packages fix security vulnerabilities

2019-09-15 17:45:31

ics

OSIsoft PI System (Update A)

2020-07-27 12:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.03 Low

EPSS

Percentile

89.8%

JSON

Related for ATLASSIAN:JRASERVER-69725