The vulnerability of the `dojox.xmpp.util.xmlEncode` component in the dojox JavaScript library allows a attacker to compromise data integrity.

🗓️ 15 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Vulnerability in dojox.xmpp.util.xmlEncode may allow data integrity compromise in the dojox javascript library.

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open Source software used by Cloud Pak System	31 Mar 202314:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Dojo Toolkit	22 Apr 202122:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in dojo library shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2019-10785, CVE-2020-5259, CVE-2020-4051, CVE-2018-15494, CVE-2021-23450)	22 Aug 202206:13	–	ibm
IBM Security Bulletins	Security Bulletin: Mulitple vulnerabilities in Dojo dojox repo may affect IBM Storage Scale	17 Jul 202313:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Dojo toolkit shipped with IBM WebSphere eXtreme Scale Liberty Deployment and eXtremescale Client	19 Apr 202411:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by XSS vulnerability (CVE-2019-10785)	8 Jun 202122:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dojo may affect IBM Business Automation Workflow and IBM Business Process Manager (BPM)	4 Feb 202120:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak for Automation	6 Feb 202100:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is affected by an IBM Dojo Toolkit vulnerability (CVE-2019-10785)	29 Jun 202005:09	–	ibm

Source	Link
github	www.github.com/dojo/dojox/security/advisories/GHSA-pg97-ww7h-5mjr
lists	www.lists.debian.org/debian-lts-announce/2020/02/msg00033.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-10785
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-10785
snyk	www.snyk.io/vuln/SNYK-JS-DOJOX-548257
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16
web	www.web.nvd.nist.gov/view/vuln/detail

18 Dec 2021 00:00Current

7High risk

Vulners AI Score7

CVSS 24.3

CVSS 35.3

EPSS0.01807

dojox.xmpp.util.xmlEncode dojox javascript library data integrity web page protections security weaknesses