EUVD-2020-0309

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

dojox is vulnerable to Cross-site Scripting before certain versions due to incomplete character encoding

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202221:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open Source software used by Cloud Pak System	31 Mar 202314:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Dojo Toolkit	22 Apr 202122:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in dojo library shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2019-10785, CVE-2020-5259, CVE-2020-4051, CVE-2018-15494, CVE-2021-23450)	22 Aug 202206:13	–	ibm
IBM Security Bulletins	Security Bulletin: Mulitple vulnerabilities in Dojo dojox repo may affect IBM Storage Scale	17 Jul 202313:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Dojo toolkit shipped with IBM WebSphere eXtreme Scale Liberty Deployment and eXtremescale Client	19 Apr 202411:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by XSS vulnerability (CVE-2019-10785)	8 Jun 202122:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dojo may affect IBM Business Automation Workflow and IBM Business Process Manager (BPM)	4 Feb 202120:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak for Automation	6 Feb 202100:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is affected by an IBM Dojo Toolkit vulnerability (CVE-2019-10785)	29 Jun 202005:09	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "79b649c0-b1fa-33e4-9ed1-cc65c10a14b1",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
github	www.github.com/dojo/dojox/security/advisories/GHSA-pg97-ww7h-5mjr
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-10785
github	www.github.com/dojo/dojox/pull/315
github	www.github.com/dojo/dojox/commit/abd033a787c718abc1a390f480ac3ea61288e5ee
lists	www.lists.debian.org/debian-lts-announce/2020/02/msg00033.html
snyk	www.snyk.io/vuln/SNYK-JS-DOJOX-548257
snyk	www.snyk.io/vuln/SNYK-JS-DOJOX-548257,
advisories	www.advisories.mageia.org/CVE-2019-10785.html
snyk	www.snyk.io/vuln/SNYK-JS-DOJOX-548257%2C
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 3.16.1

CVSS 24.3

EPSS0.00243