CVE-2015-9251

Опубликовано: 18 янв. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*

Версия до 3.0.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:business_process_management_suite:11.1.1.9.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_converged_application_server:*:*:*:*:*:*:*:*

Версия до 7.0.0.1 (исключая)

cpe:2.3:a:oracle:communications_interactive_session_recorder:6.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_interactive_session_recorder:6.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_interactive_session_recorder:6.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_services_gatekeeper:*:*:*:*:*:*:*:*

Версия до 6.1.0.4.0 (исключая)

cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:*

Версия до 7.2 (исключая)

cpe:2.3:a:oracle:endeca_information_discovery_studio:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:enterprise_operations_monitor:3.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:enterprise_operations_monitor:4.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*

Версия от 7.3.3 (включая) до 7.3.5 (включая)

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*

Версия от 8.0.0 (включая) до 8.0.7 (включая)

cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:*

Версия от 8.0.4 (включая) до 8.0.7 (включая)

cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:*

Версия от 8.0.5 (включая) до 8.0.7 (включая)

cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:*

Версия от 8.0.4 (включая) до 8.0.7 (включая)

cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:*

Версия от 8.0.4 (включая) до 8.0.7 (включая)

cpe:2.3:a:oracle:financial_services_liquidity_risk_management:*:*:*:*:*:*:*:*

Версия от 8.0.2 (включая) до 8.0.6 (включая)

cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:*

Версия от 8.0.2 (включая) до 8.0.7 (включая)

cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:*

Версия от 8.0.4 (включая) до 8.0.6 (включая)

cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.6:*:*:*:*:*:*:*

cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:healthcare_foundation:7.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:healthcare_foundation:7.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.11:*:*:*:*:*:*:*

cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oss_support_tools:19.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*

cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:primavera_gateway:17.12:*:*:*:*:*:*:*

cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*

Версия от 17.1 (включая) до 17.12 (включая)

cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*

cpe:2.3:a:oracle:real-time_scheduler:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:retail_allocation:15.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:retail_invoice_matching:15.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:retail_sales_audit:15.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:retail_workforce_management_software:1.60.9:*:*:*:*:*:*:*

cpe:2.3:a:oracle:retail_workforce_management_software:1.64.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:siebel_ui_framework:18.10:*:*:*:*:*:*:*

cpe:2.3:a:oracle:siebel_ui_framework:18.11:*:*:*:*:*:*:*

cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:*

Версия от 4.3.0.1 (включая) до 4.3.0.4 (включая)

cpe:2.3:a:oracle:utilities_mobile_workforce_management:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:weblogic_server:12.1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:weblogic_server:12.2.1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09842

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2015-9251

CVSS3: 6.1

ubuntu

больше 7 лет назад

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

CVE-2015-9251

CVSS3: 6.1

redhat

почти 10 лет назад

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

CVE-2015-9251

CVSS3: 6.1

msrc

5 месяцев назад

Описание отсутствует

CVE-2015-9251

CVSS3: 6.1

debian

больше 7 лет назад

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attack ...

GHSA-rmxg-73gg-4p98

CVSS3: 6.1

github

больше 7 лет назад

Cross-Site Scripting (XSS) in jquery

EPSS

Процентиль: 93%

0.09842

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79