Lucene search

CVE-2015-9251

🗓️ 18 Jan 2018 23:00:29Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 2245 Views

jQuery < 3.0.0 XSS vulnerability due to cross-domain Ajax request

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 161
Cvelist	CVE-2015-9251	18 Jan 201823:00	–	cvelist
UbuntuCve	CVE-2015-9251	18 Jan 201800:00	–	ubuntucve
RubySec	Cross-Site Scripting (XSS) in jquery	21 Jan 201821:00	–	rubygems
OpenVAS	jQuery < 3.0.0 XSS Vulnerability	1 Nov 201800:00	–	openvas
OpenVAS	Tenable Nessus Network Monitor < 5.11.0 Multiple Vulnerabilities (TNS-2019-08)	20 Dec 202200:00	–	openvas
OpenVAS	openSUSE: Security Advisory for Recommended (openSUSE-SU-2020:0395-1)	29 Mar 202000:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2020:0737-1)	19 Apr 202100:00	–	openvas
F5 Networks	K29562170 : jQuery vulnerability CVE-2015-9251	19 Feb 202000:00	–	f5
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM® Cloud Private (CVE-2015-9251)	19 Nov 201815:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect V5 is vulnerable to cross-site scripting in jQuery (CVE-2015-9251)	4 Jan 202122:53	–	ibm

Nvd

Node

jquery jqueryRange<3.0.0

Node

oracle agile_product_lifecycle_management_for_processMatch6.2.0.0

oracle agile_product_lifecycle_management_for_processMatch6.2.1.0

oracle agile_product_lifecycle_management_for_processMatch6.2.2.0

oracle agile_product_lifecycle_management_for_processMatch6.2.3.0

oracle agile_product_lifecycle_management_for_processMatch6.2.3.1

oracle banking_platformMatch2.6.0

oracle banking_platformMatch2.6.1

oracle banking_platformMatch2.6.2

oracle business_process_management_suiteMatch11.1.1.9.0

oracle business_process_management_suiteMatch12.1.3.0.0

oracle business_process_management_suiteMatch12.2.1.3.0

oracle communications_converged_application_serverRange<7.0.0.1

oracle communications_interactive_session_recorderMatch6.0

oracle communications_interactive_session_recorderMatch6.1

oracle communications_interactive_session_recorderMatch6.2

oracle communications_services_gatekeeperRange<6.1.0.4.0

oracle communications_webrtc_session_controllerRange<7.2

oracle endeca_information_discovery_studioMatch3.1.0

oracle endeca_information_discovery_studioMatch3.2.0

oracle enterprise_manager_ops_centerMatch12.2.2

oracle enterprise_manager_ops_centerMatch12.3.3

oracle enterprise_operations_monitorMatch3.4

oracle enterprise_operations_monitorMatch4.0

oracle financial_services_analytical_applications_infrastructureRange7.3.3–7.3.5

oracle financial_services_analytical_applications_infrastructureRange8.0.0–8.0.7

oracle financial_services_asset_liability_managementRange8.0.4–8.0.7

oracle financial_services_data_integration_hubRange8.0.5–8.0.7

oracle financial_services_funds_transfer_pricingRange8.0.4–8.0.7

oracle financial_services_hedge_management_and_ifrs_valuationsRange8.0.4–8.0.7

oracle financial_services_liquidity_risk_managementRange8.0.2–8.0.6

oracle financial_services_loan_loss_forecasting_and_provisioningRange8.0.2–8.0.7

oracle financial_services_market_risk_measurement_and_managementMatch8.0.5

oracle financial_services_market_risk_measurement_and_managementMatch8.0.6

oracle financial_services_profitability_managementRange8.0.4–8.0.6

oracle financial_services_reconciliation_frameworkMatch8.0.5

oracle financial_services_reconciliation_frameworkMatch8.0.6

oracle fusion_middleware_mapviewerMatch12.2.1.3.0

oracle healthcare_foundationMatch7.1

oracle healthcare_foundationMatch7.2

oracle healthcare_translational_researchMatch3.1.0

oracle hospitality_cruise_fleet_managementMatch9.0.11

oracle hospitality_guest_accessMatch4.2.0

oracle hospitality_guest_accessMatch4.2.1

oracle hospitality_materials_controlMatch18.1

oracle hospitality_reporting_and_analyticsMatch9.1.0

oracle insurance_insbridge_rating_and_underwritingMatch5.2

oracle insurance_insbridge_rating_and_underwritingMatch5.4

oracle insurance_insbridge_rating_and_underwritingMatch5.5

oracle jd_edwards_enterpriseone_toolsMatch9.2

oracle jdeveloperMatch11.1.1.9.0

oracle jdeveloperMatch12.1.3.0.0

oracle jdeveloperMatch12.2.1.3.0

oracle oss_support_toolsMatch19.1

oracle peoplesoft_enterprise_peopletoolsMatch8.55

oracle peoplesoft_enterprise_peopletoolsMatch8.56

oracle peoplesoft_enterprise_peopletoolsMatch8.57

oracle primavera_gatewayMatch15.2

oracle primavera_gatewayMatch16.2

oracle primavera_gatewayMatch17.12

oracle primavera_unifierRange17.1–17.12

oracle primavera_unifierMatch16.1

oracle primavera_unifierMatch16.2

oracle primavera_unifierMatch18.8

oracle real-time_schedulerMatch2.3.0

oracle retail_allocationMatch15.0.2

oracle retail_customer_insightsMatch15.0

oracle retail_customer_insightsMatch16.0

oracle retail_invoice_matchingMatch15.0

oracle retail_sales_auditMatch15.0

oracle retail_workforce_management_softwareMatch1.60.9

oracle retail_workforce_management_softwareMatch1.64.0

oracle service_busMatch12.1.3.0.0

oracle service_busMatch12.2.1.3.0

oracle siebel_ui_frameworkMatch18.10

oracle siebel_ui_frameworkMatch18.11

oracle utilities_frameworkRange4.3.0.1–4.3.0.4

oracle utilities_mobile_workforce_managementMatch2.3.0

oracle webcenter_sitesMatch11.1.1.8.0

oracle weblogic_serverMatch12.1.3.0

oracle weblogic_serverMatch12.2.1.3

Source	Link
lists	www.lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-212-04
lists	www.lists.apache.org/thread.html/10f0f3aefd51444d1198c65f44ffdf2d78ca3359423dbc1c168c9731%40%3Cdev.flink.apache.org%3E
lists	www.lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html
github	www.github.com/jquery/jquery/commit/f60729f3903d17917dc351f3ac87794de379b0cc
oracle	www.oracle.com/security-alerts/cpuapr2020.html
seclists	www.seclists.org/fulldisclosure/2019/May/11
lists	www.lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
packetstormsecurity	www.packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html
access	www.access.redhat.com/errata/RHSA-2020:0729

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jan 2018 23:29Current

6.3Medium risk

Vulners AI Score6.3

CVSS24.3

CVSS36.1

EPSS0.08598

CWE-79