CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability

KEV

Analyzed

AliasesRHSA-2020:5412RHSA-2021:0860RHSA-2021:1846+45 more

Published 29-04-2020Last modified 21-10-2025

Vulnerability summary

CVE-2020-11023 is a medium (CVSS 6.9) vulnerability in JQuery. It is known to be exploited: CISA lists it, first on 23-01-2025. EPSS estimates a 84.89% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 2 public exploits are recorded. Fixed in 1.10.5.

Priority

Act nowlisted as exploited

Listed as exploited by CISA (23-01-2025)

Source freshness unavailable

How is this decided?

CVSS score

6.9/10

010

Medium · v3.1 (CVE.org)

EPSS score

84.89%

0%100%

Critical · 0.00 pp in 30 days

KEVExploited in the wildCritical · listed in 1 catalog

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 24 · Duplicates 1 · Related 7

Timeline

29-04-2020
PublishedVulnerability first disclosed.
23-01-2025
Added to CISA KEVExploitedJQuery Cross-Site Scripting (XSS) Vulnerability
13-02-2025
CISA remediation dueDeadline passedApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
21-10-2025
Last modifiedVulnerability information updated.

Description

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVSS metrics

14 scores · 13 sources · 2 versions

v3.16.9v2.04.3

EPSS trend

Probability

84.89%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 84.89% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 23-01-2025
Federal due date: 13-02-2025

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. blog.jquery.com/2020/04/10/jquery-3-5-0-released/ nvd.nist.gov/vuln/detail/CVE-2020-11023

Public exploits

2 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
exploit-databasemultipleUnverified
jQuery 1.0.3 - Cross-Site Scripting (XSS)
Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat134 products

bind-dyndb-ldap< 0:11.6-2.module+el8.4.0+9328+4ec4e316 | < 0:11.2-3.module+el8.2.0+21753+7109ce90.3
bind-dyndb-ldap-debuginfo< 0:11.6-2.module+el8.4.0+9328+4ec4e316 | < 0:11.2-3.module+el8.2.0+21753+7109ce90.3
bind-dyndb-ldap-debugsource< 0:11.6-2.module+el8.4.0+9328+4ec4e316 | < 0:11.2-3.module+el8.2.0+21753+7109ce90.3
cpp< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
cpp-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5

cross-gcc-aarch64-debuginfo< 0:11.4.1-4.el9_4 | < 0:11.5.0-5.el9_5
cross-gcc-c++-aarch64-debuginfo< 0:11.4.1-4.el9_4 | < 0:11.5.0-5.el9_5
custodia< 0:0.6.0-3.module+el8.1.0+4098+f286395e
doxygen< 1:1.9.1-12.el9_2 | < 1:1.8.14-13.el8_8 | < 1:1.8.5-4.el7_9.1 | < 1:1.8.5-3.el7_7.1 | < 1:1.8.14-13.el8_10 | < 1:1.9.1-12.el9_4 | < 1:1.9.1-12.el9_5
doxygen-debuginfo< 1:1.9.1-12.el9_2 | < 1:1.8.14-13.el8_8 | < 1:1.8.5-4.el7_9.1 | < 1:1.8.5-3.el7_7.1 | < 1:1.8.14-13.el8_10 | < 1:1.9.1-12.el9_4 | < 1:1.9.1-12.el9_5
doxygen-debugsource< 1:1.9.1-12.el9_2 | < 1:1.8.14-13.el8_8 | < 1:1.8.14-13.el8_10 | < 1:1.9.1-12.el9_4 | < 1:1.9.1-12.el9_5
doxygen-doxywizard< 1:1.9.1-12.el9_2 | < 1:1.8.14-13.el8_8 | < 1:1.8.5-4.el7_9.1 | < 1:1.8.5-3.el7_7.1 | < 1:1.8.14-13.el8_10 | < 1:1.9.1-12.el9_4 | < 1:1.9.1-12.el9_5
doxygen-doxywizard-debuginfo< 1:1.9.1-12.el9_2 | < 1:1.8.14-13.el8_8 | < 1:1.8.14-13.el8_10 | < 1:1.9.1-12.el9_4 | < 1:1.9.1-12.el9_5
doxygen-latex< 1:1.9.1-12.el9_2 | < 1:1.8.14-13.el8_8 | < 1:1.8.5-4.el7_9.1 | < 1:1.8.5-3.el7_7.1 | < 1:1.8.14-13.el8_10 | < 1:1.9.1-12.el9_4 | < 1:1.9.1-12.el9_5
gcc< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
gcc-base-debuginfo< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
gcc-c++< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
gcc-c++-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
gcc-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
gcc-debugsource< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
gcc-gdb-plugin< 0:8.5.0-23.el8_10 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4
gcc-gdb-plugin-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
gcc-gfortran< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
gcc-gfortran-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
gcc-gnat< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
gcc-go< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
gcc-objc++< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
gcc-offload-nvptx< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
gcc-offload-nvptx-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
gcc-plugin-annobin< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-18.3.el8_8 | < 0:11.5.0-5.el9_5
gcc-plugin-annobin-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-18.3.el8_8 | < 0:11.5.0-5.el9_5
gcc-plugin-devel< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:8.5.0-18.3.el8_8 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
gcc-plugin-devel-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
gcc-toolset-13-gcc< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-gcc-c++< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-gcc-c++-debuginfo< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-gcc-debuginfo< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-gcc-gfortran< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-gcc-gfortran-debuginfo< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-gcc-plugin-annobin< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-gcc-plugin-annobin-debuginfo< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-gcc-plugin-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-gcc-plugin-devel-debuginfo< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libasan-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libatomic-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libgccjit< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libgccjit-debuginfo< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libgccjit-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libitm-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-liblsan-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libquadmath-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libstdc++-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libstdc++-docs< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libtsan-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-libubsan-devel< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-offload-nvptx< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-13-offload-nvptx-debuginfo< 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:13.3.1-2.2.el9_4
gcc-toolset-14-gcc< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-gcc-c++< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-gcc-c++-debuginfo< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-gcc-debuginfo< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-gcc-gfortran< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-gcc-gfortran-debuginfo< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-gcc-plugin-annobin< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-gcc-plugin-annobin-debuginfo< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-gcc-plugin-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-gcc-plugin-devel-debuginfo< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libasan-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libatomic-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libgccjit< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libgccjit-debuginfo< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libgccjit-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libitm-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-liblsan-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libquadmath-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libstdc++-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libstdc++-docs< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libtsan-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-libubsan-devel< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-offload-nvptx< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
gcc-toolset-14-offload-nvptx-debuginfo< 0:14.2.1-1.3.el9_5 | < 0:14.2.1-7.1.el8_10
ipa< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-client< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-client-common< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-client-debuginfo< 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-client-epn< 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa
ipa-client-samba< 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-common< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-debuginfo< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-debugsource< 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-healthcheck< 0:0.7-3.module+el8.4.0+9008+94c5103b | < 0:0.4-4.module+el8.2.0+5489+95477d9f
ipa-healthcheck-core< 0:0.7-3.module+el8.4.0+9008+94c5103b | < 0:0.4-4.module+el8.2.0+5489+95477d9f
ipa-idoverride-memberof< 0:0.0.4-6.module+el8.1.0+4098+f286395e
ipa-idoverride-memberof-plugin< 0:0.0.4-6.module+el8.1.0+4098+f286395e
ipa-python-compat< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-selinux< 0:4.9.2-3.module+el8.4.0+10413+a92f1bfa
ipa-server< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10412+5ecb5b37 | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-server-common< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10412+5ecb5b37 | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-server-debuginfo< 0:4.9.2-3.module+el8.4.0+10412+5ecb5b37 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-server-dns< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10412+5ecb5b37 | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-server-trust-ad< 0:4.6.8-5.el7_9.4 | < 0:4.9.2-3.module+el8.4.0+10412+5ecb5b37 | < 0:4.6.5-11.el7_7.5 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
ipa-server-trust-ad-debuginfo< 0:4.9.2-3.module+el8.4.0+10412+5ecb5b37 | < 0:4.8.4-14.module+el8.2.0+22854+05081d30.5
libasan< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libasan-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
libasan-static< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libasan8< 0:14.2.1-1.3.el9_5 | < 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:14.2.1-7.1.el8_10 | < 0:13.3.1-2.2.el9_4
libasan8-debuginfo< 0:14.2.1-1.3.el9_5 | < 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:14.2.1-7.1.el8_10 | < 0:13.3.1-2.2.el9_4
libatomic< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libatomic-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
libatomic-static< 0:8.5.0-23.el8_10 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgcc< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgcc-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
libgccjit< 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:11.5.0-5.el9_5
libgccjit-debuginfo< 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:11.5.0-5.el9_5
libgccjit-devel< 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:11.5.0-5.el9_5
libgfortran< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgfortran-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
libgfortran-static< 0:8.5.0-23.el8_10 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgnat< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgnat-devel< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgnat-static< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgo< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgo-devel< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgo-static< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgomp< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libgomp-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
libgomp-offload-nvptx< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
libgomp-offload-nvptx-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
libhwasan-debuginfo< 0:14.2.1-1.3.el9_5 | < 0:13.3.1-2.2.el8_10 | < 0:13.3.1-2.2.el9_5 | < 0:14.2.1-7.1.el8_10 | < 0:13.3.1-2.2.el9_4
libitm< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libitm-debuginfo< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5
libitm-devel< 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:8.5.0-10.4.el8_6 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:11.5.0-5.el9_5 | < 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
libitm-static< 0:4.8.5-40.el7_7 | < 0:4.8.5-45.el7_9
liblsan< 0:14.2.1-1.3.el9_5 | < 0:8.5.0-23.el8_10 | < 0:11.3.1-4.4.el9_2 | < 0:11.4.1-4.el9_4 | < 0:11.2.1-9.5.el9_0 | < 0:13.3.1-2.2.el8_10 | < 0:8.5.0-10.4.el8_6 | < 0:13.3.1-2.2.el9_5 | < 0:8.3.1-8.el8_2 | < 0:8.5.0-18.3.el8_8 | < 0:8.4.1-1.4.el8_4 | < 0:14.2.1-7.1.el8_10 | < 0:13.3.1-2.2.el9_4 | < 0:11.5.0-5.el9_5

Show all 134

Oracle30 products

application_express< 20.2
application_testing_suite13.3.0.1
banking_enterprise_collections≥ 2.7.0, ≤ 2.8.0
banking_platform≥ 2.4.0, ≤ 2.10.0
blockchain_platform< 21.1.2 | 21.1.2

Show all 30

Netapp17 products

Show all 17

Debian3 products

node-jquery< 3.5.0+dfsg-2
zncAll versions (No fix recorded) | < 1.10.3-1
debian_linuxEOL9.0

Alpine2 products

cacti< 1.2.13-r0
drupal7< 7.70-r0

Chainguard2 products

keycloak-26.6All versions (No fix recorded)
keycloak-26.6-iamguarded-compatAll versions (No fix recorded)

Ubuntu2 products

drupal7< 7.26-1ubuntu0.1+esm3 | < 7.44-1ubuntu1~16.04.0+esm3
jquery< 3.2.1-1ubuntu0.1~esm1 | < 3.3.1~dfsg-3ubuntu0.1

Wolfi2 products

keycloak-26.6All versions (No fix recorded)
keycloak-26.6-iamguarded-compatAll versions (No fix recorded)

Components1 product

jquery≥ 1.0.3, < 3.5.0

Drupal1 product

drupal≥ 7.0, < 7.70 | ≥ 8.7.0, < 8.7.14 | ≥ 8.8.0, < 8.8.6

Fedoraproject1 product

fedoraEOL31 | 32 | 33

Jquery1 product

jquery≥ 1.0.3, < 3.5.0

Npm1 product

jquery≥ 1.0.3, < 3.5.0

NuGet1 product

jquery≥ 1.0.3, < 3.5.0

Org.webjars.npm1 product

jquery≥ 1.0.3, < 3.5.0

RubyGems1 product

jquery-rails< 4.4.0

16 vendors · 200 products · Showing 200 of 274

References

276 links

www.debian.org/security/2020/dsa-4693Vendor AdvisoryAdvisoryWEBMailing ListThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryAdvisoryMailing ListThird Party Advisory
www.oracle.com/security-alerts/cpujul2020.htmlAdvisoryWEBThird Party Advisory
jquery.com/upgrade-guide/3.5/REPORTAdvisoryRelease NotesVendor Advisory
security.netapp.com/advisory/ntap-20200511-0006/AdvisoryThird Party Advisory
www.drupal.org/sa-core-2020-002AdvisoryWEBThird Party Advisory
github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6REPORTAdvisoryWEBThird Party Advisory
blog.jquery.com/2020/04/10/jquery-3-5-0-releasedAdvisoryWEBRelease NotesVendor Advisory
lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.htmlVendor AdvisoryWEBBroken Link
security.gentoo.org/glsa/202007-03Vendor AdvisoryAdvisoryWEBThird Party Advisory

Show all 100 references

lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.htmlVendor AdvisoryWEBBroken Link
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.fedoraproject.org/archives/…Vendor AdvisoryAdvisoryMailing ListThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryAdvisoryMailing ListThird Party Advisory
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.fedoraproject.org/archives/…Vendor AdvisoryAdvisoryMailing ListThird Party Advisory
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
www.oracle.com/security-alerts/cpuoct2020.htmlAdvisoryWEBThird Party Advisory
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.htmlVendor AdvisoryAdvisoryWEBBroken LinkMailing ListThird Party Advisory
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
www.oracle.com/security-alerts/cpujan2021.htmlAdvisoryWEBThird Party Advisory
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.debian.org/debian-lts-announce/2021/03/msg00033.htmlMailing ListAdvisoryWEBThird Party Advisory
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
www.oracle.com/security-alerts/cpuApr2021.htmlFIXWEBPatchThird Party Advisory
www.tenable.com/security/tns-2021-10AdvisoryWEBThird Party Advisory
www.tenable.com/security/tns-2021-02AdvisoryWEBThird Party Advisory
packetstormsecurity.com/files/162160/jQuery-1.0.3-Cross-Site-Scripting.htmlEVIDENCEWEBExploitThird Party AdvisoryVDB Entry
www.oracle.com//security-alerts/cpujul2021.htmlFIXWEBPatchThird Party Advisory
www.oracle.com/security-alerts/cpuoct2021.htmlFIXWEBPatchThird Party Advisory
lists.apache.org/thread.html/…Mailing ListREPORTWEBIssue Tracking
www.oracle.com/security-alerts/cpujan2022.htmlFIXWEBPatchThird Party Advisory
www.oracle.com/security-alerts/cpuapr2022.htmlFIXWEBPatchThird Party Advisory
www.oracle.com/security-alerts/cpujul2022.htmlAdvisoryWEBThird Party Advisory
lists.debian.org/debian-lts-announce/2023/08/msg00040.htmlMailing ListAdvisoryWEBThird Party Advisory
github.com/github/…AdvisoryWEBThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11023Government ResourceWEBUS Government Resource
access.redhat.com/errata/RHSA-2020:5412Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1850004REPORT
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5412.jsonAdvisory
access.redhat.com/security/cve/CVE-2020-11023REPORT
www.cve.org/CVERecord?id=CVE-2020-11023AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2020-11023Advisory
blog.jquery.com/2020/04/10/jquery-3-5-0-released/ARTICLE
www.cisa.gov/known-exploited-vulnerabilities-catalogARTICLEREPORT
access.redhat.com/errata/RHSA-2021:0860Advisory
bugzilla.redhat.com/show_bug.cgi?id=1846349REPORT
bugzilla.redhat.com/show_bug.cgi?id=1863619REPORT
bugzilla.redhat.com/show_bug.cgi?id=1884819REPORT
bugzilla.redhat.com/show_bug.cgi?id=1892793REPORT
bugzilla.redhat.com/show_bug.cgi?id=1895197REPORT
bugzilla.redhat.com/show_bug.cgi?id=1897253REPORT
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0860.jsonAdvisory
access.redhat.com/errata/RHSA-2021:1846Advisory
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=871208REPORT
bugzilla.redhat.com/show_bug.cgi?id=1340463REPORT
bugzilla.redhat.com/show_bug.cgi?id=1357495REPORT
bugzilla.redhat.com/show_bug.cgi?id=1484088REPORT
bugzilla.redhat.com/show_bug.cgi?id=1542737REPORT
bugzilla.redhat.com/show_bug.cgi?id=1544379REPORT
bugzilla.redhat.com/show_bug.cgi?id=1660877REPORT
bugzilla.redhat.com/show_bug.cgi?id=1779981REPORT
bugzilla.redhat.com/show_bug.cgi?id=1780328REPORT
bugzilla.redhat.com/show_bug.cgi?id=1780510REPORT
bugzilla.redhat.com/show_bug.cgi?id=1780782REPORT
bugzilla.redhat.com/show_bug.cgi?id=1784657REPORT
bugzilla.redhat.com/show_bug.cgi?id=1809215REPORT
bugzilla.redhat.com/show_bug.cgi?id=1810148REPORT

Showing 100 of 276.