Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMF60BB94D7967CEAD40F0980A31531DDBC18366C562E024DA0424A54A910A3EDC
HistoryOct 06, 2022 - 5:04 a.m.

Security Bulletin: JQuery UI shipped with IBM Tivoli Netcool Impact is vulnerable to XSS (CVE-2022-31160)

2022-10-0605:04:31
www.ibm.com
35
ibm tivoli netcool impact
jquery ui
xss
cross-site scripting
vulnerability
security bulletin

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

60.7%

JSON

Summary

JQuery UI is used by IBM Tivoli Netcool Impact as part of its UI framework. Information about a security vulnerability affecting JQuery UI has been published in a security bulletin.

Vulnerability Details

CVEID:CVE-2022-31160
**DESCRIPTION:**jQuery UI is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the check-box-radio widget. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim’s Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.
CVSS Base score: 5.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/231462 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Tivoli Netcool Impact 7.1.0

Remediation/Fixes

Product VRMF APAR Remediation
IBM Tivoli Netcool Impact 7.1.0 7.1.0.27 IJ41341 Upgrade to IBM Tivoli Netcool Impact 7.1.0 Fix Pack 27

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmtivoli_netcool\/impactMatch7.1.0
VendorProductVersionCPE
ibmtivoli_netcool\/impact7.1.0cpe:2.3:a:ibm:tivoli_netcool\/impact:7.1.0:*:*:*:*:*:*:*

Related

prion 1
ibm 21
openvas 8
osv 5
fedora 3
veracode 1
nvd 1
nessus 17
ubuntucve 1
f5 1
debiancve 1
redhatcve 1
cvelist 1
rubygems 1
github 1
cve 1
huntr 1
ubuntu 2
debian 1
tenable 1
oracle 6
prion
prion
Cross site scripting
2022-07-20 20:15:00
ibm
ibm
Security Bulletin: IBM Workload Scheduler potentially affected by cross-site scripting vulnerability in jQuery UI (CVE-2022-31160)
2023-01-30 17:49:50
Security Bulletin: There is a vulnerability in jQuery UI used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-31160)
2023-03-27 20:34:27
Security Bulletin: IBM Robotic Process Automation is vulnerable to cross site scripting due to jquery-ui (CVE-2022-31160)
2022-10-06 04:10:57
openvas
openvas
Fedora: Security Advisory for js-jquery-ui (FEDORA-2022-1a01ed37e2)
2022-11-21 00:00:00
Fedora: Security Advisory for js-jquery-ui (FEDORA-2022-7291b78111)
2022-11-21 00:00:00
Fedora: Security Advisory for js-jquery-ui (FEDORA-2022-22d8ba36d0)
2022-11-21 00:00:00
osv
osv
CVE-2022-31160
2022-07-20 20:15:08
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
2022-07-18 17:07:36
jqueryui vulnerability
2022-09-09 09:31:52
fedora
fedora
[SECURITY] Fedora 35 Update: js-jquery-ui-1.13.2-1.fc35
2022-11-21 00:51:38
[SECURITY] Fedora 36 Update: js-jquery-ui-1.13.2-1.fc36
2022-11-21 01:14:37
[SECURITY] Fedora 37 Update: js-jquery-ui-1.13.2-1.fc37
2022-11-21 01:09:21
veracode
veracode
Cross-site Scripting (XSS)
2022-07-19 05:25:38
nvd
nvd
CVE-2022-31160
2022-07-20 20:15:08
nessus
nessus
jQuery UI < 1.13.2 Cross-Site Scripting
2023-03-07 00:00:00
JQuery UI < 1.13.2 XSS
2022-07-29 00:00:00
Fedora 35 : js-jquery-ui (2022-22d8ba36d0)
2022-12-22 00:00:00
ubuntucve
ubuntucve
CVE-2022-31160
2022-07-20 00:00:00
f5
f5
K000134507 : jQuery UI vulnerability CVE-2022-31160
2023-05-08 00:00:00
debiancve
debiancve
CVE-2022-31160
2022-07-20 20:15:08
redhatcve
redhatcve
CVE-2022-31160
2022-07-25 18:12:42
cvelist
cvelist
CVE-2022-31160 jQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label
2022-07-20 00:00:00
rubygems
rubygems
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
2022-07-14 21:00:00
github
github
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
2022-07-18 17:07:36
cve
cve
CVE-2022-31160
2022-07-20 20:15:08
huntr
huntr
Jquery UI 1.13.1 in use which is vulnerable to CVE-2022-31160
2023-02-20 08:50:55
ubuntu
ubuntu
jQuery UI vulnerability
2022-09-09 00:00:00
jQuery UI vulnerabilities
2023-10-05 00:00:00
debian
debian
[SECURITY] [DLA 3230-1] jqueryui security update
2022-12-07 10:30:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

60.7%

JSON
Related for F60BB94D7967CEAD40F0980A31531DDBC18366C562E024DA0424A54A910A3EDC
prion1ibm21openvas8osv5fedora3veracode1nvd1nessus17ubuntucve1f51debiancve1redhatcve1cvelist1rubygems1github1cve1huntr1ubuntu2debian1tenable1oracle6