Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-11023

95
FAUCET Score

CVE-2020-11023 is a Cross-Site Scripting (XSS) vulnerability in jQuery versions prior to 3.5.0, where untrusted HTML containing <option> elements, even after sanitization, can execute malicious code when passed to DOM manipulation methods. This affects numerous products including Debian, Drupal, and Oracle. The vulnerability has a CVSS score of 6.1 (Medium) due to its network-based attack vector and low attack complexity, potentially leading to limited impact on confidentiality and integrity. Notably, this CVE is actively exploited (KEV listed), has publicly available exploit code (EDB-49767), and garners significant community discussion and media coverage, indicating widespread awareness and potential risk.

Impacted Technologies

VendorProductVersion(s)CPE
>= 1.0.3, < 3.5.0CPE matchmatch criteria
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
31CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
32CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
33CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.9MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
1.6
Impact Score
4.7
CvssVersion
3.1

Exploit Intelligence

EPSS Score
83.83%
Probability of exploitation in next 30 days
EPSS Percentile
99.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Added to KEV · Jan 23, 2025
ExploitDB: EDB-49767 · Apr 14, 2021
This CVE's current EPSS score of 0.8383 is in the 100th percentile among its peer group of 26,219 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (139)

composerpatch availablevia ghsa
Product: components/jqueryFixed in: 3.5.0
mavenpatch availablevia ghsa
Product: org.webjars.npm:jqueryFixed in: 3.5.0
npmpatch availablevia ghsa
Product: jqueryFixed in: 3.5.0
nugetpatch availablevia ghsa
Product: jQueryFixed in: 3.5.0
oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Discovery 1 for RHEL 9Fixed in: discovery/discovery-server-rhel9:1.12.0-1
View patch
redhatpatch availablevia redhat_api
Product: Discovery 1 for RHEL 9Fixed in: discovery/discovery-ui-rhel9:1.12.0-1
View patch
redhatpatch availablevia redhat_api
Product: Openshift Service Mesh 1.1Fixed in: kiali-0:v1.12.10.redhat2-1.el7
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Service Mesh 1.1Fixed in: ior-0:1.1.6-1.el8
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Service Mesh 1.1Fixed in: servicemesh-0:1.1.6-1.el8
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Service Mesh 1.1Fixed in: servicemesh-cni-0:1.1.6-1.el8
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Service Mesh 1.1Fixed in: servicemesh-grafana-0:6.4.3-13.el8
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Service Mesh 1.1Fixed in: servicemesh-operator-0:1.1.6-2.el8
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Service Mesh 1.1Fixed in: servicemesh-prometheus-0:2.14.0-14.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ansible Tower 3.6 for RHEL 7Fixed in: ansible-tower-36/ansible-tower:3.6.7-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ansible Tower 3.7 for RHEL 7Fixed in: ansible-tower-37/ansible-tower-rhel7:3.7.4-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: pki-core-0:10.5.18-12.el7_9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: ipa-0:4.6.8-5.el7_9.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: pcs-0:0.9.169-3.el7_9.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: doxygen-1:1.8.5-3.el7_7.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: ipa-0:4.6.5-11.el7_7.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: gcc-0:4.8.5-40.el7_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: pki-core-0:10.5.16-8.el7_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: doxygen-1:1.8.5-4.el7_9.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: gcc-0:4.8.5-45.el7_9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: pki-core:10.6-8030020200911215836.5ff1562f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: pki-deps:10.6-8030020200527165326.30b713e6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: idm:client-8040020210319141812.479738cf
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: idm:DL1-8040020210319141752.1f8cbe47
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: tbb-0:2018.2-10.el8_10.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: gcc-0:8.5.0-23.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: gcc-toolset-13-gcc-0:13.3.1-2.2.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: gcc-toolset-14-gcc-0:14.2.1-7.1.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: doxygen-1:1.8.14-13.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: pcs-0:0.10.10-4.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: tbb-0:2018.2-9.el8_2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: gcc-0:8.3.1-8.el8_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: idm:DL1-8020020250212111622.792f4060
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: tbb-0:2018.2-10.el8_4.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: gcc-0:8.4.1-1.4.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: tbb-0:2018.2-10.el8_4.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: gcc-0:8.4.1-1.4.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: tbb-0:2018.2-10.el8_4.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: gcc-0:8.4.1-1.4.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: tbb-0:2018.2-10.el8_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: gcc-0:8.5.0-10.4.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: tbb-0:2018.2-10.el8_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: gcc-0:8.5.0-10.4.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: tbb-0:2018.2-10.el8_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: gcc-0:8.5.0-10.4.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: tbb-0:2018.2-10.el8_8.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: gcc-0:8.5.0-18.3.el8_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: doxygen-1:1.8.14-13.el8_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: tbb-0:2020.3-8.el9_5.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: gcc-toolset-14-gcc-0:14.2.1-1.3.el9_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: gcc-toolset-13-gcc-0:13.3.1-2.2.el9_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: gcc-0:11.5.0-5.el9_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: doxygen-1:1.9.1-12.el9_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: tbb-0:2020.3-8.el9_0.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: gcc-0:11.2.1-9.5.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: tbb-0:2020.3-8.el9_2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: gcc-0:11.3.1-4.4.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: doxygen-1:1.9.1-12.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: tbb-0:2020.3-8.el9_4.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: gcc-0:11.4.1-4.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: gcc-toolset-13-gcc-0:13.3.1-2.2.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: doxygen-1:1.9.1-12.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7Fixed in: jquery
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-hal-console-0:3.3.16-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-hal-console-0:3.3.16-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-hal-console-0:3.3.16-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.5Fixed in: openshift4/ose-console:v4.5.0-202007012112.p0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.6Fixed in: openshift4/ose-grafana:v4.6.0-202010061132.p0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.6Fixed in: openshift4/ose-prometheus:v4.6.0-202009290409.p0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenStack Platform 16.1Fixed in: python-XStatic-jQuery224-0:2.2.4.1-3.el8ost
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenStack Platform 16.2Fixed in: python-django20-0:2.0.13-19.el8ost
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/clair-rhel8:v3.13.4-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-bundle:v3.13.4-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-rhel8:v3.13.4-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-qemu-rhcos-rhel8:v3.13.4-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-rhel8:v3.13.4-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-bundle:v3.13.4-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-rhel8:v3.13.4-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-bundle:v3.13.4-9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-rhel8:v3.13.4-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8:v3.13.4-6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-bundle:v3.9.10-7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-rhel8:v3.9.10-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-qemu-rhcos-rhel8:v3.9.10-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-rhel8:v3.9.10-7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-bundle:v3.9.10-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-rhel8:v3.9.10-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-bundle:v3.9.10-16
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-rhel8:v3.9.10-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8:v3.9.10-7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/clair-rhel8:v3.12.8-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-bundle:v3.12.8-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-rhel8:v3.12.8-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-qemu-rhcos-rhel8:v3.12.8-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-rhel8:v3.12.8-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-bundle:v3.12.8-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-rhel8:v3.12.8-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-bundle:v3.12.8-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-rhel8:v3.12.8-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8:v3.12.8-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/clair-rhel8:v3.11.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-bundle:v3.11.9-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-rhel8:v3.11.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-qemu-rhcos-rhel8:v3.11.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-rhel8:v3.11.9-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-bundle:v3.11.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-rhel8:v3.11.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-bundle:v3.11.9-8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-rhel8:v3.11.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8:v3.11.9-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/clair-rhel8:v3.10.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-bundle:v3.10.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-bridge-operator-rhel8:v3.10.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-qemu-rhcos-rhel8:v3.10.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-builder-rhel8:v3.10.9-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-bundle:v3.10.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-container-security-operator-rhel8:v3.10.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-bundle:v3.10.9-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-operator-rhel8:v3.10.9-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8:v3.10.9-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7Fixed in: keycloak-idp-jquery
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.4.1Fixed in: rh-sso7-keycloak
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 7Fixed in: rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el7sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 8Fixed in: rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el8sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 9Fixed in: rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el9sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization Engine 4.4Fixed in: ovirt-engine-ui-extensions-0:1.2.2-1.el8ev
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization Engine 4.4Fixed in: ovirt-web-ui-0:1.6.4-1.el8ev
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization Engine 4.4Fixed in: org.ovirt.engine-root-0:4.5.2.4-1
View patch
redhatpatch availablevia redhat_api
Product: RHOL-5.8-RHEL-8Fixed in: logging-kibana6-container-v6.8.1-479
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3Fixed in: quay/clair-rhel8:v3.9.10-3
View patch
redhatpatch availablevia redhat_api
Product: A-MQ Interconnect 1.y for RHEL 6Fixed in: qpid-dispatch-0:1.13.0-3.el6_10
View patch
redhatpatch availablevia redhat_api
Product: A-MQ Interconnect 1.y for RHEL 7Fixed in: qpid-dispatch-0:1.13.0-3.el7
View patch
redhatpatch availablevia redhat_api
Product: A-MQ Interconnect 1.y for RHEL 8Fixed in: qpid-dispatch-0:1.13.0-3.el8
View patch
rubygemspatch availablevia ghsa
Product: jquery-railsFixed in: 4.4.0

Vendor Advisories (2)

npmGHSA-jpcq-cgw6-v4j6medium

Potential XSS vulnerability in jQuery

Apr 29, 2020
redhatCVE-2020-11023Moderate

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

Apr 29, 2020

References

cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
github.com / github/advisory-database/blob/99afa6fdeaf5d1d23e1021ff915a5e5dbc82c1f1/advisories/github-reviewed/2020/04/GHSA-jpcq-cgw6-v4j6/GHSA-jpcq-cgw6-v4j6.json
Third Party Advisory
lists.opensuse.org / opensuse-security-announce/2020-07/msg00067.html
Broken Link
lists.opensuse.org / opensuse-security-announce/2020-07/msg00085.html
Broken Link
lists.opensuse.org / opensuse-security-announce/2020-11/msg00039.html
Broken LinkMailing ListThird Party Advisory
packetstormsecurity.com / files/162160/jQuery-1.0.3-Cross-Site-Scripting.html
ExploitThird Party AdvisoryVDB Entry
blog.jquery.com / 2020/04/10/jquery-3-5-0-released
Release NotesVendor Advisory
github.com / jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6
Third Party Advisory
jquery.com / upgrade-guide/3.5
Release NotesVendor Advisory
lists.apache.org / thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36%40%3Cissues.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r0593393ca1e97b1e7e098fe69d414d6bd0a467148e9138d07e86ebbb%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r07ab379471fb15644bf7a92e4a98cbc7df3cf4e736abae0cc7625fe6%40%3Cdev.felix.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r094f435595582f6b5b24b66fedf80543aa8b1d57a3688fbcc21f06ec%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r1fed19c860a0d470f2a3eded12795772c8651ff583ef951ddac4918c%40%3Cgitbox.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r2c85121a47442036c7f8353a3724aa04f8ecdfda1819d311ba4f5330%40%3Cdev.felix.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r3702ede0ff83a29ba3eb418f6f11c473d6e3736baba981a8dbd9c9ef%40%3Cdev.felix.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48%40%3Cissues.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r4aadb98086ca72ed75391f54167522d91489a0d0ae25b12baa8fc7c5%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r4dba67be3239b34861f1b9cfdf9dfb3a90272585dcce374112ed6e16%40%3Cdev.felix.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae%40%3Cissues.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r55f5e066cc7301e3630ce90bbbf8d28c82212ae1f2d4871012141494%40%3Cdev.felix.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760%40%3Cissues.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r6c4df3b33e625a44471009a172dabe6865faec8d8f21cac2303463b1%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r6e97b37963926f6059ecc1e417721608723a807a76af41d4e9dbed49%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d%40%3Cissues.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c%40%3Cissues.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r9006ad2abf81d02a0ef2126bab5177987e59095b7194a487c4ea247c%40%3Ccommits.felix.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r9c5fda81e4bca8daee305b4c03283dddb383ab8428a151d4cb0b3b15%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/r9e0bd31b7da9e7403478d22652b8760c946861f8ebd7bd750844898e%40%3Cdev.felix.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/ra32c7103ded9041c7c1cb8c12c8d125a6b2f3f3270e2937ef8417fac%40%3Cgitbox.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/ra374bb0299b4aa3e04edde01ebc03ed6f90cf614dad40dd428ce8f72%40%3Cgitbox.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/ra3c9219fcb0b289e18e9ec5a5ebeaa5c17d6b79a201667675af6721c%40%3Cgitbox.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/ra406b3adfcffcb5ce8707013bdb7c35e3ffc2776a8a99022f15274c6%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rab82dd040f302018c85bd07d33f5604113573514895ada523c3401d9%40%3Ccommits.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/radcb2aa874a79647789f3563fcbbceaf1045a029ee8806b59812a8ea%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rb25c3bc7418ae75cba07988dafe1b6912f76a9dd7d94757878320d61%40%3Cgitbox.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rb69b7d8217c1a6a2100247a5d06ce610836b31e3f5d73fc113ded8e7%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67%40%3Cdev.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rd38b4185a797b324c8dd940d9213cf99fcdc2dbf1fc5a63ba7dee8c9%40%3Cissues.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679%40%3Ccommits.nifi.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108%40%3Cissues.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4%40%3Cissues.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2%40%3Cissues.flink.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rf0f8939596081d84be1ae6a91d6248b96a02d8388898c372ac807817%40%3Cdev.felix.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rf1ba79e564fe7efc56aef7c986106f1cf67a3427d08e997e088e7a93%40%3Cgitbox.hive.apache.org%3E
Issue TrackingMailing List
lists.apache.org / thread.html/rf661a90a15da8da5922ba6127b3f5f8194d4ebec8855d60a0dd13248%40%3Cdev.hive.apache.org%3E
Issue TrackingMailing List
lists.debian.org / debian-lts-announce/2021/03/msg00033.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2023/08/msg00040.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B
Mailing ListThird Party Advisory
security.gentoo.org / glsa/202007-03
Third Party Advisory
security.netapp.com / advisory/ntap-20200511-0006
Third Party Advisory
debian.org / security/2020/dsa-4693
Mailing ListThird Party Advisory
drupal.org / sa-core-2020-002
Third Party Advisory
oracle.com / security-alerts/cpuApr2021.html
PatchThird Party Advisory
oracle.com / security-alerts/cpuapr2022.html
PatchThird Party Advisory
oracle.com / security-alerts/cpujan2021.html
Third Party Advisory
oracle.com / security-alerts/cpujan2022.html
PatchThird Party Advisory
oracle.com / security-alerts/cpujul2020.html
Third Party Advisory
oracle.com / /security-alerts/cpujul2021.html
PatchThird Party Advisory
oracle.com / security-alerts/cpujul2022.html
Third Party Advisory
oracle.com / security-alerts/cpuoct2020.html
Third Party Advisory
oracle.com / security-alerts/cpuoct2021.html
PatchThird Party Advisory
tenable.com / security/tns-2021-02
Third Party Advisory
tenable.com / security/tns-2021-10
Third Party Advisory