ROS-20240826-07

🗓️ 26 Aug 2024 00:00:00Reported by RedosType

A vulnerability in the SafeList.preserveRelativeLinks parameter of the Java library for analyzing, retrieving, and manipulating data in HTML jsoup documents is related to failure to protect the structure of a web page, enabling cross-site scripting attacks (XSS

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected but not classified as vulnerable to multiple vulnerabilities	28 Jul 202301:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Workload Scheduler potentially affected by jsoup XSS attacks (CVE-2022-36033)	30 Jan 202317:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jsoup used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-36033)	4 Apr 202320:41	–	ibm
IBM Security Bulletins	Security Bulletin: There is a security vulnerability in jsoup used by IBM Maximo Asset Management (CVE-2022-36033)	8 Jun 202302:31	–	ibm
Tenable Nessus	Amazon Linux 2023 : jsoup, jsoup-javadoc (ALAS2023-2023-315)	24 Aug 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : jsoup (ALAS-2024-2466)	19 Feb 202400:00	–	nessus
Tenable Nessus	Oracle Business Process Management Suite (Apr 2023 CPU)	19 Apr 202300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	jsoup	1.16.1-2	UNKNOWN