OracleLinuxELSA-2021-9400

HistoryAug 09, 2021 - 12:00 a.m.

bootstrap security update

2021-08-0900:00:00

linux.oracle.com

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

[3.0.0-7.0.1]

Backport jQuery CVE-2020-11023 fixes from jQuery v3.5.0 to bundled v1.10.2 [Orabug: 33181852]

OSVersionArchitecturePackageVersionFilename
oracle linux7srcbootstrap< 3.0.0-7.0.1.el7bootstrap-3.0.0-7.0.1.el7.src.rpm
oracle linux7noarchbootstrap< 3.0.0-7.0.1.el7bootstrap-3.0.0-7.0.1.el7.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	bootstrap	< 3.0.0-7.0.1.el7	bootstrap-3.0.0-7.0.1.el7.src.rpm
oracle linux	7	noarch	bootstrap	< 3.0.0-7.0.1.el7	bootstrap-3.0.0-7.0.1.el7.noarch.rpm

nessus 54

prion 1

osv 10

redhat 13

openvas 20

amazon 1

packetstorm 1

cve 1

zdt 1

github 2

ics 2

almalinux 3

ubuntucve 2

alpinelinux 1

ibm 46

debiancve 1

redhatcve 1

oraclelinux 5

f5 1

veracode 1

rocky 2

exploitdb 1

atlassian 5

hp 1

fedora 6

attackerkb 2

joomla 1

suse 3

githubexploit 2

checkpoint_advisories 1

debian 2

drupal 1

typo3 1

gentoo 1

altlinux 1

freebsd 1

adobe 1

nessus

Amazon Linux 2 : ipa (ALAS-2021-1626)

2021-04-22 00:00:00

RHEL 8 : python-XStatic-jQuery224 (RHSA-2020:5412)

2020-12-18 00:00:00

NewStart CGSL CORE 5.04 / MAIN 5.04 : ipa Vulnerability (NS-SA-2021-0104)

2021-10-27 00:00:00

prion

Code injection

2020-04-29 21:15:00

osv

Potential XSS vulnerability in jQuery

2020-04-29 22:19:14

CVE-2020-11023

2020-04-29 21:15:11

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

2021-05-18 06:14:07

redhat

(RHSA-2021:1846) Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

2021-05-18 06:14:07

(RHSA-2021:0860) Moderate: ipa security and bug fix update

2021-03-16 10:27:14

(RHSA-2020:5412) Moderate: python-XStatic-jQuery224 security update

2020-12-15 17:29:55

openvas

jQuery 1.0.3 < 3.5.0 XSS Vulnerability

2020-05-05 00:00:00

openSUSE: Security Advisory for otrs (openSUSE-SU-2020:1888-1)

2020-11-10 00:00:00

Tenable Nessus Network Monitor < 5.13.0 Multiple Vulnerabilities (TNS-2021-02)

2022-12-20 00:00:00

amazon

Medium: ipa

2021-04-20 17:55:00

packetstorm

jQuery 1.0.3 Cross Site Scripting

2021-04-14 00:00:00

cve

CVE-2020-11023

2020-04-29 21:15:00

zdt

jQuery 1.0.3 - Cross-Site Scripting Vulnerability

2021-04-14 00:00:00

github

Potential XSS vulnerability in jQuery

2020-04-29 22:19:14

Persistent Cross-site Scripting vulnerability in PrivateBin

2022-04-12 20:45:22

ics

Sensormatic Electronics VideoEdge

2021-11-02 12:00:00

Mitsubishi Electric EcoWebServerIII

2022-02-24 12:00:00

almalinux

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

2021-05-18 06:14:07

Low: pcs security, bug fix, and enhancement update

2021-11-09 08:21:49

Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

2020-11-03 12:29:58

ubuntucve

CVE-2020-11023

2020-04-29 00:00:00

CVE-2020-23064

2023-06-26 00:00:00

alpinelinux

CVE-2020-11023

2020-04-29 21:15:00

ibm

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to cross-site scripting in jQuery (CVE-2020-11023)

2023-01-12 21:59:00

Security Bulletin: jQuery Vulnerabilities Affect IBM Emptoris Sourcing (CVE-2020-11023, CVE-2020-11022)

2020-12-03 09:54:47

Security Bulletin: JQuery as used by IBM QRadar Network Packet Capture is vulnerable to Cross Site Scripting (XSS) (CVE-2020-11023, CVE-2020-11022)

2020-08-10 20:34:42

debiancve

CVE-2020-11023

2020-04-29 21:15:00

redhatcve

CVE-2020-11023

2021-06-20 07:11:02

oraclelinux

ipa security and bug fix update

2021-03-19 00:00:00

idm:DL1 and idm:client security, bug fix, and enhancement update

2021-05-25 00:00:00

jquery-ui security update

2022-03-01 00:00:00

K66544153 : jQuery vulnerability CVE-2020-11023

2020-08-03 00:00:00

veracode

Cross-Site Scripting (XSS)

2020-04-30 02:21:22

rocky

idm:DL1 and idm:client security, bug fix, and enhancement update

2021-05-18 06:14:07

pcs security, bug fix, and enhancement update

2021-11-09 08:21:49

exploitdb

jQuery 1.0.3 - Cross-Site Scripting (XSS)

2021-04-14 00:00:00

atlassian

Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023

2021-02-02 09:59:24

Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023

2021-02-02 09:59:24

jquery 2.2.4 XSS vulnerability

2022-08-24 14:53:45

HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)

2020-09-17 00:00:00

fedora

[SECURITY] Fedora 32 Update: drupal8-8.9.0-1.fc32

2020-06-16 01:32:24

[SECURITY] Fedora 33 Update: drupal7-7.72-1.fc33

2020-09-25 17:15:48

[SECURITY] Fedora 32 Update: cacti-1.2.13-1.fc32

2020-07-23 01:06:59

attackerkb

CVE-2020-11023

2020-04-29 00:00:00

CVE-2020-11022

2020-04-29 00:00:00

joomla

[20200604] - Core - XSS in jQuery.htmlPrefilter

2020-04-10 00:00:00

suse

Security update for otrs (moderate)

2020-11-10 00:00:00

Security update for cacti, cacti-spine (moderate)

2020-07-25 00:00:00

Security update for cacti, cacti-spine (moderate)

2020-07-28 00:00:00

githubexploit

Exploit for Cross-site Scripting in Jquery

2021-10-16 01:10:33

Exploit for Cross-site Scripting in Jquery

2020-04-14 19:12:01

checkpoint_advisories

jQuery Cross Site Scripting (CVE-2020-11022; CVE-2020-11023)

2020-11-16 00:00:00

debian

[SECURITY] [DSA 4693-1] drupal7 security update

2020-05-26 21:08:21

[SECURITY] [DLA 2608-1] jquery security update

2021-03-26 01:32:22

drupal

Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002

2020-05-20 00:00:00

typo3

Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)

2020-07-29 00:00:00

gentoo

Cacti: Multiple vulnerabilities

2020-07-26 00:00:00

altlinux

Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1

2020-10-21 00:00:00

freebsd

Cacti -- multiple vulnerabilities

2020-07-15 00:00:00

adobe

APSB19-38 Security update available for Adobe Experience Manager

2019-07-09 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

Related for ELSA-2021-9400