Oracle Insurance Data Foundation vulnerabilities

2 vulnerabilities

Known vulnerabilities in Oracle Insurance Data Foundation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2020-11022jquery +150 more6y agojQuery has a potential XSS vulnerabilityIn jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.CVSS6.9MediumEPSS99.22%RoutineCVE-2019-11358backdropcms · backdrop +124 more7y agobackdropcms backdropjQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.CVSS6.1MediumEPSS86.82%