Lucene search

K

PRIOn knowledge basePRION:CVE-2020-7656

HistoryMay 19, 2020 - 9:15 p.m.

Cross site scripting

2020-05-1921:15:00

PRIOn knowledge base

www.prio-n.com

13

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove “<script>” HTML tags that contain a whitespace character, i.e: “</script >”, which results in the enclosed script logic to be executed.

CPENameOperatorVersion
jquerylt1.9.0
junoseq21.2
oncommand_system_managerge3.0.0
oncommand_system_managerle3.1.3
peoplesoft_enterprise_peopletoolseq8.58

References

security.netapp.com/advisory/ntap-20200528-0001/

snyk.io/vuln/SNYK-JS-JQUERY-569619

supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1?language=en_US

www.oracle.com/security-alerts/cpujul2022.html

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

Related for PRION:CVE-2020-7656

cve1 osv4 veracode1 debiancve1 ibm20 nvd1 redhatcve1 github1 nodejs1 cvelist1 ubuntucve1 githubexploit1 openvas2 nessus10 almalinux1 oraclelinux1 redhat2 rocky1 ics1 oracle1