CVE-2019-11358

6.1

MEDIUM CVSS 3.1

Drupal Backdrop CMS jQuery Prototype Pollution

Description

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

INFO

Published Date :

April 20, 2019, 12:29 a.m.

Last Modified :

Nov. 21, 2024, 4:20 a.m.

Remotely Exploit :

Yes !

Source :

[email protected]

Affected Products

The following products are affected by CVE-2019-11358 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID	Vendor	Product
1	Oracle	webcenter_sites
2	Oracle	retail_point-of-service
3	Oracle	weblogic_server
4	Oracle	communications_webrtc_session_controller
5	Oracle	peoplesoft_enterprise_peopletools
6	Oracle	siebel_ui_framework
7	Oracle	retail_customer_management_and_segmentation_foundation
8	Oracle	primavera_unifier
9	Oracle	application_testing_suite
10	Oracle	communications_analytics
11	Oracle	enterprise_manager_ops_center
12	Oracle	jd_edwards_enterpriseone_tools
13	Oracle	hospitality_simphony
14	Oracle	financial_services_data_integration_hub
15	Oracle	hospitality_guest_access
16	Oracle	retail_back_office
17	Oracle	fusion_middleware_mapviewer
18	Oracle	communications_billing_and_revenue_management
19	Oracle	agile_product_lifecycle_management_for_process
20	Oracle	business_process_management_suite
21	Oracle	banking_platform
22	Oracle	communications_diameter_signaling_router
23	Oracle	communications_interactive_session_recorder
24	Oracle	communications_services_gatekeeper
25	Oracle	communications_unified_inventory_management
26	Oracle	communications_application_session_controller
27	Oracle	communications_session_report_manager
28	Oracle	communications_session_route_manager
29	Oracle	communications_element_manager
30	Oracle	primavera_gateway
31	Oracle	identity_manager
32	Oracle	jdeveloper
33	Oracle	big_data_discovery
34	Oracle	financial_services_analytical_applications_infrastructure
35	Oracle	financial_services_funds_transfer_pricing
36	Oracle	knowledge
37	Oracle	policy_automation_connector_for_siebel
38	Oracle	bi_publisher
39	Oracle	financial_services_hedge_management_and_ifrs_valuations
40	Oracle	financial_services_market_risk_measurement_and_management
41	Oracle	financial_services_liquidity_risk_management
42	Oracle	financial_services_balance_sheet_planning
43	Oracle	insurance_accounting_analyzer
44	Oracle	financial_services_loan_loss_forecasting_and_provisioning
45	Oracle	financial_services_asset_liability_management
46	Oracle	financial_services_profitability_management
47	Oracle	financial_services_price_creation_and_discovery
48	Oracle	financial_services_liquidity_risk_measurement_and_management
49	Oracle	financial_services_data_foundation
50	Oracle	communications_operations_monitor
51	Oracle	application_express
52	Oracle	banking_digital_experience
53	Oracle	communications_eagle_application_processor
54	Oracle	enterprise_session_border_controller
55	Oracle	healthcare_foundation
56	Oracle	healthcare_translational_research
57	Oracle	insurance_insbridge_rating_and_underwriting
58	Oracle	policy_automation
59	Oracle	rest_data_services
60	Oracle	retail_central_office
61	Oracle	retail_customer_insights
62	Oracle	retail_returns_management
63	Oracle	storagetek_tape_analytics_sw_tool
64	Oracle	tape_library_acsls
65	Oracle	financial_services_institutional_performance_analytics
66	Oracle	financial_services_retail_customer_analytics
67	Oracle	policy_automation_for_mobile_devices
68	Oracle	banking_enterprise_collections
69	Oracle	financial_services_regulatory_reporting_for_de_nederlandsche_bank
70	Oracle	financial_services_analytical_applications_reconciliation_framework
71	Oracle	financial_services_basel_regulatory_capital_basic
72	Oracle	financial_services_basel_regulatory_capital_internal_ratings_based_approach
73	Oracle	financial_services_data_governance_for_us_regulatory_reporting
74	Oracle	financial_services_regulatory_reporting_for_european_banking_authority
75	Oracle	financial_services_regulatory_reporting_for_us_federal_reserve
76	Oracle	hospitality_materials_control
77	Oracle	insurance_allocation_manager_for_enterprise_profitability
78	Oracle	insurance_data_foundation
79	Oracle	service_bus
80	Oracle	transportation_management
81	Oracle	real-time_scheduler
82	Oracle	financial_services_revenue_management_and_billing
83	Oracle	utilities_mobile_workforce_management
84	Oracle	application_service_level_management
85	Oracle	diagnostic_assistant
86	Oracle	financial_services_enterprise_financial_performance_analytics
87	Oracle	financial_services_retail_performance_analytics
88	Oracle	insurance_ifrs_17_analyzer
89	Oracle	insurance_performance_insight
90	Oracle	jdeveloper_and_adf
91	Oracle	siebel_mobile_applications
92	Oracle	system_utilities
1	Opensuse	leap
2	Opensuse	backports_sle
1	Netapp	snapcenter
2	Netapp	oncommand_system_manager
1	Redhat	cloudforms
2	Redhat	virtualization_manager
1	Fedoraproject	fedora
1	Debian	debian_linux
1	Drupal	drupal
1	Juniper	junos
1	Joomla	joomla\!
1	Djangoproject	django
1	Jquery	jquery
1	Backdropcms	backdrop

: Total Affected Vendor : 12 | Products : 106

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.

Score	Version	Severity	Vector	Exploitability Score	Impact Score	Source
	CVSS 2.0	MEDIUM				[email protected]
	CVSS 3.1	MEDIUM				[email protected]

Solution

Update affected software to address the jQuery prototype pollution vulnerability.

Upgrade to jQuery version 3.4.0 or later.
Update affected packages or packages.
Apply the appropriate vendor patches or updates.

Public PoC/Exploit Available at Github

CVE-2019-11358 has a 5602 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2019-11358.

URL	Resource
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html	Mailing List Third Party Advisory
http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html	Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html	Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html	Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2019/May/10	Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2019/May/11	Mailing List Patch Third Party Advisory
http://seclists.org/fulldisclosure/2019/May/13	Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/03/2	Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/108023	Broken Link Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHBA-2019:1570	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1456	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2587	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3023	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3024	Third Party Advisory
https://backdropcms.org/security/backdrop-sa-core-2019-009	Third Party Advisory
https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/	Release Notes Vendor Advisory
https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b	Patch Third Party Advisory
https://github.com/jquery/jquery/pull/4333	Patch Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601	Third Party Advisory
https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E	Issue Tracking
https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/	Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Apr/32	Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Jun/12	Issue Tracking Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/May/18	Mailing List Patch Third Party Advisory
https://security.netapp.com/advisory/ntap-20190919-0001/	Third Party Advisory
https://snyk.io/vuln/SNYK-JS-JQUERY-174006	Exploit Third Party Advisory
https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1	Third Party Advisory
https://www.debian.org/security/2019/dsa-4434	Third Party Advisory
https://www.debian.org/security/2019/dsa-4460	Third Party Advisory
https://www.drupal.org/sa-core-2019-006	Patch Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html	Patch Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	Patch Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	Patch Third Party Advisory
https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/	Patch Third Party Advisory
https://www.synology.com/security/advisory/Synology_SA_19_19	Third Party Advisory
https://www.tenable.com/security/tns-2019-08	Third Party Advisory
https://www.tenable.com/security/tns-2020-02	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html	Mailing List Third Party Advisory
http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html	Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html	Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html	Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2019/May/10	Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2019/May/11	Mailing List Patch Third Party Advisory
http://seclists.org/fulldisclosure/2019/May/13	Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/03/2	Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/108023	Broken Link Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHBA-2019:1570	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1456	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2587	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3023	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3024	Third Party Advisory
https://backdropcms.org/security/backdrop-sa-core-2019-009	Third Party Advisory
https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/	Release Notes Vendor Advisory
https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b	Patch Third Party Advisory
https://github.com/jquery/jquery/pull/4333	Patch Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601	Third Party Advisory
https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E	Issue Tracking
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E	Issue Tracking
https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/	Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Apr/32	Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Jun/12	Issue Tracking Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/May/18	Mailing List Patch Third Party Advisory
https://security.netapp.com/advisory/ntap-20190919-0001/	Third Party Advisory
https://snyk.io/vuln/SNYK-JS-JQUERY-174006	Exploit Third Party Advisory
https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1	Third Party Advisory
https://www.debian.org/security/2019/dsa-4434	Third Party Advisory
https://www.debian.org/security/2019/dsa-4460	Third Party Advisory
https://www.drupal.org/sa-core-2019-006	Patch Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html	Patch Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	Patch Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	Patch Third Party Advisory
https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/	Patch Third Party Advisory
https://www.synology.com/security/advisory/Synology_SA_19_19	Third Party Advisory
https://www.tenable.com/security/tns-2019-08	Third Party Advisory
https://www.tenable.com/security/tns-2020-02	Third Party Advisory

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2019-11358 is associated with the following CWEs:

CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2019-11358 weaknesses.

CAPEC-1: Accessing Functionality Not Properly Constrained by ACLs Accessing Functionality Not Properly Constrained by ACLs CAPEC-77: Manipulating User-Controlled Variables Manipulating User-Controlled Variables CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels Exploiting Incorrectly Configured Access Control Security Levels

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

adampagot/ftc-11691-decode

None

Java

Updated: 1 hour, 1 minute ago

0 stars 0 fork 0 watcher

Born at : Sept. 27, 2025, 2:43 p.m. This repo has been linked 1 different CVEs too.

FTC20166/2025-FTC-20166

2025-FTC-20166

Java

Updated: 13 hours, 41 minutes ago

0 stars 0 fork 0 watcher

Born at : Sept. 27, 2025, 2:54 a.m. This repo has been linked 1 different CVEs too.

FTC20166/2024-FTC-20166

2024-FTC-20166

Java OpenSCAD Kotlin

Updated: 13 hours, 43 minutes ago

0 stars 0 fork 0 watcher

Born at : Sept. 27, 2025, 2:48 a.m. This repo has been linked 1 different CVEs too.

TimATracy/Fire8636_Decode

Code for 2025-2026 season

Java

Updated: 16 hours, 51 minutes ago

0 stars 0 fork 0 watcher

Born at : Sept. 26, 2025, 11:44 p.m. This repo has been linked 1 different CVEs too.

SilenceRK/2025-26-Training

None

Java

Updated: 18 hours, 15 minutes ago

0 stars 0 fork 0 watcher

Born at : Sept. 26, 2025, 10:21 p.m. This repo has been linked 1 different CVEs too.

CapitalRobotics/Janx-Decode

The repository for the CapitalRobotics code to power the Decode season competitoin

Java

Updated: 21 hours, 11 minutes ago

0 stars 0 fork 0 watcher

Born at : Sept. 26, 2025, 7:23 p.m. This repo has been linked 1 different CVEs too.

romortizg/FTC-SDK

None

Java

Updated: 22 hours, 12 minutes ago

0 stars 0 fork 0 watcher

Born at : Sept. 26, 2025, 6:23 p.m. This repo has been linked 1 different CVEs too.

Kazerry/SyntaxTerror-Decode

None

Java

Updated: 22 hours, 21 minutes ago

1 stars 0 fork 0 watcher

Born at : Sept. 26, 2025, 5:37 p.m. This repo has been linked 1 different CVEs too.

probotixbladel/Decode-PP

team code for ftc decode using pedro pathing

Java

Updated: 1 day, 2 hours ago

0 stars 0 fork 0 watcher

Born at : Sept. 26, 2025, 10:15 a.m. This repo has been linked 1 different CVEs too.

kinyewlee/CenterStage

None

Java

Updated: 1 day, 14 hours ago

0 stars 0 fork 0 watcher

Born at : Sept. 26, 2025, 1:39 a.m. This repo has been linked 1 different CVEs too.

kinyewlee/IntoTheDeep

None

Java

Updated: 1 day, 15 hours ago

0 stars 0 fork 0 watcher

Born at : Sept. 26, 2025, 1:26 a.m. This repo has been linked 1 different CVEs too.

TanushFTC/NeutronKnightsLatestAndGreatest

Java

Updated: 1 day, 16 hours ago

0 stars 0 fork 0 watcher

Born at : Sept. 25, 2025, 11:51 p.m. This repo has been linked 1 different CVEs too.

MroofBoolean/14624RoboJags-DECODE

This repository is for the FTC Team RoboJags 14624, This is for the upcoming Competiton DECODE.

ftc-java ftc-teamcode

Java

Updated: 1 day, 15 hours ago

0 stars 0 fork 0 watcher

Born at : Sept. 25, 2025, 11:04 p.m. This repo has been linked 1 different CVEs too.

MechHawks5178/FtcRobotController51782025-2026

None

Java

Updated: 1 day, 17 hours ago

0 stars 0 fork 0 watcher

Born at : Sept. 25, 2025, 10:56 p.m. This repo has been linked 1 different CVEs too.

StarL0st/ResistorsDECODE2025

adasd

Java

Updated: 18 hours, 47 minutes ago

0 stars 0 fork 0 watcher

Born at : Sept. 25, 2025, 10:51 p.m. This repo has been linked 1 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2019-11358 vulnerability anywhere in the article.

tripwire.com

VERT Threat Alert: February 2025 Patch Tuesday Analysis

Today’s VERT Alert addresses Microsoft’s February 2025 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1143 as soon as coverage is completed.I ...

Published Date: Feb 11, 2025 (7 months, 2 weeks ago)

The Hacker News

CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List

Vulnerability / JavaScript The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday placed a now-patched security flaw impacting the popular jQuery JavaScript library to its Known ...

Published Date: Jan 24, 2025 (8 months ago)

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2019-11358 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

CVE Modified by af854a3a-2127-422b-91ae-364da2661108

Nov. 21, 2024

Action	Type	New Value
Added	Reference	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html
Added	Reference	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html
Added	Reference	http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
Added	Reference	http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html
Added	Reference	http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
Added	Reference	http://seclists.org/fulldisclosure/2019/May/10
Added	Reference	http://seclists.org/fulldisclosure/2019/May/11
Added	Reference	http://seclists.org/fulldisclosure/2019/May/13
Added	Reference	http://www.openwall.com/lists/oss-security/2019/06/03/2
Added	Reference	http://www.securityfocus.com/bid/108023
Added	Reference	https://access.redhat.com/errata/RHBA-2019:1570
Added	Reference	https://access.redhat.com/errata/RHSA-2019:1456
Added	Reference	https://access.redhat.com/errata/RHSA-2019:2587
Added	Reference	https://access.redhat.com/errata/RHSA-2019:3023
Added	Reference	https://access.redhat.com/errata/RHSA-2019:3024
Added	Reference	https://backdropcms.org/security/backdrop-sa-core-2019-009
Added	Reference	https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/
Added	Reference	https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b
Added	Reference	https://github.com/jquery/jquery/pull/4333
Added	Reference	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
Added	Reference	https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E
Added	Reference	https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
Added	Reference	https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html
Added	Reference	https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html
Added	Reference	https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html
Added	Reference	https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
Added	Reference	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/
Added	Reference	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/
Added	Reference	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/
Added	Reference	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/
Added	Reference	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/
Added	Reference	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/
Added	Reference	https://seclists.org/bugtraq/2019/Apr/32
Added	Reference	https://seclists.org/bugtraq/2019/Jun/12
Added	Reference	https://seclists.org/bugtraq/2019/May/18
Added	Reference	https://security.netapp.com/advisory/ntap-20190919-0001/
Added	Reference	https://snyk.io/vuln/SNYK-JS-JQUERY-174006
Added	Reference	https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1
Added	Reference	https://www.debian.org/security/2019/dsa-4434
Added	Reference	https://www.debian.org/security/2019/dsa-4460
Added	Reference	https://www.drupal.org/sa-core-2019-006
Added	Reference	https://www.oracle.com//security-alerts/cpujul2021.html
Added	Reference	https://www.oracle.com/security-alerts/cpuapr2020.html
Added	Reference	https://www.oracle.com/security-alerts/cpuApr2021.html
Added	Reference	https://www.oracle.com/security-alerts/cpujan2020.html
Added	Reference	https://www.oracle.com/security-alerts/cpujan2021.html
Added	Reference	https://www.oracle.com/security-alerts/cpujan2022.html
Added	Reference	https://www.oracle.com/security-alerts/cpujul2020.html
Added	Reference	https://www.oracle.com/security-alerts/cpuoct2020.html
Added	Reference	https://www.oracle.com/security-alerts/cpuoct2021.html
Added	Reference	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Added	Reference	https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
Added	Reference	https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/
Added	Reference	https://www.synology.com/security/advisory/Synology_SA_19_19
Added	Reference	https://www.tenable.com/security/tns-2019-08
Added	Reference	https://www.tenable.com/security/tns-2020-02

Action	Type	Old Value	New Value
Changed	Reference Type	https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E No Types Assigned	https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E Issue Tracking
Changed	Reference Type	https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html No Types Assigned	https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html Mailing List, Third Party Advisory
Changed	Reference Type	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/ No Types Assigned	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/ Mailing List, Third Party Advisory
Changed	Reference Type	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/ No Types Assigned	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/ Mailing List, Third Party Advisory
Changed	Reference Type	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/ No Types Assigned	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/ Mailing List, Third Party Advisory
Changed	Reference Type	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/ No Types Assigned	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/ Mailing List, Third Party Advisory
Changed	Reference Type	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/ No Types Assigned	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/ Mailing List, Third Party Advisory
Changed	Reference Type	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/ No Types Assigned	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/ Mailing List, Third Party Advisory
Changed	Reference Type	https://snyk.io/vuln/SNYK-JS-JQUERY-174006 Patch, Third Party Advisory	https://snyk.io/vuln/SNYK-JS-JQUERY-174006 Exploit, Third Party Advisory
Changed	Reference Type	https://www.oracle.com/security-alerts/cpujan2020.html Third Party Advisory	https://www.oracle.com/security-alerts/cpujan2020.html Patch, Third Party Advisory
Changed	CPE Configuration	OR cpe:2.3:o:debian:debian_linux:8.0::::::: cpe:2.3:o:debian:debian_linux:9.0:::::::	OR cpe:2.3:o:debian:debian_linux:8.0::::::: cpe:2.3:o:debian:debian_linux:9.0::::::: cpe:2.3:o:debian:debian_linux:10.0:::::::

Action	Type	Old Value	New Value
Added	Reference		MITRE https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/ [No types assigned]
Added	Reference		MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/ [No types assigned]
Added	Reference		MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/ [No types assigned]
Added	Reference		MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/ [No types assigned]
Added	Reference		MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/ [No types assigned]
Added	Reference		MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/ [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E [No types assigned]
Added	Reference		MITRE https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E [No types assigned]
Removed	Reference	MITRE https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205@%3Ccommits.airflow.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc@%3Ccommits.airflow.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7@%3Ccommits.airflow.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f@%3Ccommits.airflow.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844@%3Ccommits.airflow.apache.org%3E
Removed	Reference	MITRE https://lists.fedoraproject.org/archives/list/[email protected]/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/
Removed	Reference	MITRE https://lists.fedoraproject.org/archives/list/[email protected]/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/
Removed	Reference	MITRE https://lists.fedoraproject.org/archives/list/[email protected]/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/
Removed	Reference	MITRE https://lists.fedoraproject.org/archives/list/[email protected]/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/
Removed	Reference	MITRE https://lists.fedoraproject.org/archives/list/[email protected]/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/
Removed	Reference	MITRE https://lists.fedoraproject.org/archives/list/[email protected]/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/
Removed	Reference	MITRE https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6@%3Ccommits.roller.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766@%3Cdev.syncope.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355@%3Cdev.flink.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d@%3Cissues.flink.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9@%3Cissues.flink.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73@%3Cissues.flink.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08@%3Cissues.flink.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa@%3Cissues.flink.apache.org%3E
Removed	Reference	MITRE https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734@%3Cdev.storm.apache.org%3E

Action	Type	Old Value	New Value
Changed	Reference Type	http://www.securityfocus.com/bid/108023 Broken Link	http://www.securityfocus.com/bid/108023 Broken Link, Third Party Advisory, VDB Entry
Changed	Reference Type	https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1 No Types Assigned	https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1 Third Party Advisory
Added	CPE Configuration		OR cpe:2.3:o:juniper:junos:21.2:-::::::*

Action	Type	Old Value	New Value
Added	CVSS V2 Metadata		Victim must voluntarily interact with attack mechanism
Added	CVSS V2		(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Added	CVSS V3		AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Changed	Reference Type	https://snyk.io/vuln/SNYK-JS-JQUERY-174006 No Types Assigned	https://snyk.io/vuln/SNYK-JS-JQUERY-174006 Patch, Third Party Advisory
Changed	Reference Type	https://seclists.org/bugtraq/2019/Apr/32 No Types Assigned	https://seclists.org/bugtraq/2019/Apr/32 Issue Tracking, Mailing List, Third Party Advisory
Changed	Reference Type	https://www.debian.org/security/2019/dsa-4434 No Types Assigned	https://www.debian.org/security/2019/dsa-4434 Third Party Advisory
Changed	Reference Type	https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/ No Types Assigned	https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/ Vendor Advisory
Changed	Reference Type	https://www.drupal.org/sa-core-2019-006 No Types Assigned	https://www.drupal.org/sa-core-2019-006 Patch, Third Party Advisory
Changed	Reference Type	https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b No Types Assigned	https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b Patch, Third Party Advisory
Changed	Reference Type	http://www.securityfocus.com/bid/108023 No Types Assigned	http://www.securityfocus.com/bid/108023 Third Party Advisory, VDB Entry
Changed	Reference Type	https://backdropcms.org/security/backdrop-sa-core-2019-009 No Types Assigned	https://backdropcms.org/security/backdrop-sa-core-2019-009 Third Party Advisory
Changed	Reference Type	https://github.com/jquery/jquery/pull/4333 No Types Assigned	https://github.com/jquery/jquery/pull/4333 Patch, Third Party Advisory
Added	CWE		CWE-79
Added	CPE Configuration		OR cpe:2.3:a:jquery:jquery::::::::* versions up to (excluding) 3.4.0
Added	CPE Configuration		OR cpe:2.3:o:debian:debian_linux:9.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:drupal:drupal::::::::* versions from (including) 7.0 up to (excluding) 7.66 cpe:2.3:a:drupal:drupal::::::::* versions from (including) 8.5.0 up to (excluding) 8.5.15 cpe:2.3:a:drupal:drupal::::::::* versions from (including) 8.6.0 up to (excluding) 8.6.15
Added	CPE Configuration		OR cpe:2.3:a:backdropcms:backdrop::::::::* versions from (including) 1.11.0 up to (excluding) 1.11.9 cpe:2.3:a:backdropcms:backdrop::::::::* versions from (including) 1.12.0 up to (excluding) 1.12.6

Action	Type	Old Value	New Value
Changed	Reference Type	https://www.oracle.com//security-alerts/cpujul2021.html No Types Assigned	https://www.oracle.com//security-alerts/cpujul2021.html Third Party Advisory
Changed	Reference Type	https://www.oracle.com/security-alerts/cpuApr2021.html No Types Assigned	https://www.oracle.com/security-alerts/cpuApr2021.html Third Party Advisory
Changed	Reference Type	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Third Party Advisory	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch, Third Party Advisory
Changed	Reference Type	https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Third Party Advisory	https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch, Third Party Advisory
Changed	CPE Configuration	OR cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1::::::: cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0::::::: cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0::::::: cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0::::::: cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0::::::: cpe:2.3:a:oracle:application_express::::::::* versions up to (excluding) 19.1 cpe:2.3:a:oracle:application_service_level_management:13.2.0.0::::::: cpe:2.3:a:oracle:application_service_level_management:13.3.0.0::::::: cpe:2.3:a:oracle:application_testing_suite:12.5.0.3::::::: cpe:2.3:a:oracle:application_testing_suite:13.1.0.1::::::: cpe:2.3:a:oracle:application_testing_suite:13.2::::::: cpe:2.3:a:oracle:application_testing_suite:13.2.0.1::::::: cpe:2.3:a:oracle:application_testing_suite:13.3::::::: cpe:2.3:a:oracle:application_testing_suite:13.3.0.1::::::: cpe:2.3:a:oracle:banking_digital_experience:18.1::::::: cpe:2.3:a:oracle:banking_digital_experience:18.2::::::: cpe:2.3:a:oracle:banking_digital_experience:18.3::::::: cpe:2.3:a:oracle:banking_digital_experience:19.1::::::: cpe:2.3:a:oracle:banking_digital_experience:19.2::::::: cpe:2.3:a:oracle:banking_digital_experience:20.1::::::: cpe:2.3:a:oracle:banking_enterprise_collections::::::::* versions from (including) 2.7.0 up to (including) 2.8.0 cpe:2.3:a:oracle:banking_platform::::::::* versions from (including) 2.4.0 up to (including) 2.10.0 cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0::::::: cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0::::::: cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0::::::: cpe:2.3:a:oracle:big_data_discovery:1.6::::::: cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0::::::: cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0::::::: cpe:2.3:a:oracle:communications_analytics:12.1.1::::::: cpe:2.3:a:oracle:communications_application_session_controller:3.8m0::::::: cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5::::::: cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0::::::: cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0::::::: cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0::::::: cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0::::::: cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1::::::: cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2::::::: cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1::::::: cpe:2.3:a:oracle:communications_element_manager:8.1.1::::::: cpe:2.3:a:oracle:communications_element_manager:8.2.0::::::: cpe:2.3:a:oracle:communications_element_manager:8.2.1::::::: cpe:2.3:a:oracle:communications_interactive_session_recorder::::::::* versions from (including) 6.0 up to (including) 6.4 cpe:2.3:a:oracle:communications_operations_monitor:3.4::::::: cpe:2.3:a:oracle:communications_operations_monitor:4.0::::::: cpe:2.3:a:oracle:communications_operations_monitor::::::::* versions from (including) 4.1 up to (including) 4.3 cpe:2.3:a:oracle:communications_operations_monitor:4.1.0::::::: cpe:2.3:a:oracle:communications_session_report_manager:8.1.1::::::: cpe:2.3:a:oracle:communications_session_report_manager:8.2.0::::::: cpe:2.3:a:oracle:communications_session_report_manager:8.2.1::::::: cpe:2.3:a:oracle:communications_session_route_manager:8.1.1::::::: cpe:2.3:a:oracle:communications_session_route_manager:8.2.0::::::: cpe:2.3:a:oracle:communications_session_route_manager:8.2.1::::::: cpe:2.3:a:oracle:communications_unified_inventory_management:7.3::::::: cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0::::::: cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2::::::: cpe:2.3:a:oracle:diagnostic_assistant:2.12.36::::::: cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3::::::: cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0::::::: cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0::::::: cpe:2.3:a:oracle:enterprise_session_border_controller:8.4::::::: cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure::::::::* versions from (including) 7.3.3 up to (including) 7.3.5 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure::::::::* versions from (including) 8.0.2 up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0::::::: cpe:2.3:a:oracle:financial_services_asset_liability_management::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0::::::: cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8::::::: cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0::::::: cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0::::::: cpe:2.3:a:oracle:financial_services_data_foundation::::::::* versions from (including) 8.0.4 up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting::::::::* versions from (including) 8.0.6 up to (including) 8.0.9 cpe:2.3:a:oracle:financial_services_data_integration_hub::::::::* versions from (including) 8.0.5 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0::::::: cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.6::::::: cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.7::::::: cpe:2.3:a:oracle:financial_services_funds_transfer_pricing::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0::::::: cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0::::::: cpe:2.3:a:oracle:financial_services_institutional_performance_analytics::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.0.1.0::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.2::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.4.0.0::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.5.0.0::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0::::::: cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning::::::::* versions from (including) 8.0.2 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0::::::: cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5::::::: cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6::::::: cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8::::::: cpe:2.3:a:oracle:financial_services_price_creation_and_discovery::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0::::::: cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4::::::: cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.6::::::: cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.7::::::: cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_retail_customer_analytics::::::::* versions from (including) 8.0.4 up to (including) 8.0.6 cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.6::::::: cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.7::::::: cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.0::::::: cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.1::::::: cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0::::::: cpe:2.3:a:oracle:healthcare_foundation:7.1.1::::::: cpe:2.3:a:oracle:healthcare_foundation:7.2.0::::::: cpe:2.3:a:oracle:healthcare_foundation:7.2.2::::::: cpe:2.3:a:oracle:healthcare_foundation:7.3.0::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.1.0::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.2.1::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.3.1::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.3.2::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.4.0::::::: cpe:2.3:a:oracle:hospitality_guest_access:4.2.0::::::: cpe:2.3:a:oracle:hospitality_guest_access:4.2.1::::::: cpe:2.3:a:oracle:hospitality_materials_control:18.1::::::: cpe:2.3:a:oracle:hospitality_simphony:18.1::::::: cpe:2.3:a:oracle:hospitality_simphony:18.2::::::: cpe:2.3:a:oracle:hospitality_simphony::::::::* versions from (including) 19.1.0 up to (including) 19.1.2 cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9::::::: cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8::::::: cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0::::::: cpe:2.3:a:oracle:insurance_data_foundation::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.6::::::: cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.7::::::: cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting::::::::* versions from (including) 5.0.0.0 up to (including) 5.6.0.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0::::::: cpe:2.3:a:oracle:insurance_performance_insight:8.0.7::::::: cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2::::::: cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0::::::: cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0::::::: cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0::::::: cpe:2.3:a:oracle:jdeveloper_and_adf:11.1.1.9.0::::::: cpe:2.3:a:oracle:jdeveloper_and_adf:12.1.3.0.0::::::: cpe:2.3:a:oracle:jdeveloper_and_adf:12.2.1.3.0::::::: cpe:2.3:a:oracle:knowledge::::::::* versions from (including) 8.6.0 up to (including) 8.6.3 cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55::::::: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56::::::: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57::::::: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58::::::: cpe:2.3:a:oracle:policy_automation:10.4.7::::::: cpe:2.3:a:oracle:policy_automation:12.1.0::::::: cpe:2.3:a:oracle:policy_automation:12.1.1::::::: cpe:2.3:a:oracle:policy_automation::::::::* versions from (including) 12.2.0 up to (including) 12.2.15 cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6::::::: cpe:2.3:a:oracle:policy_automation_for_mobile_devices::::::::* versions from (including) 12.2.0 up to (including) 12.2.15 cpe:2.3:a:oracle:primavera_gateway:15.2.18::::::: cpe:2.3:a:oracle:primavera_gateway::::::::* versions from (including) 16.2.0 up to (including) 16.2.11 cpe:2.3:a:oracle:primavera_gateway::::::::* versions from (including) 17.12.0 up to (including) 17.12.7 cpe:2.3:a:oracle:primavera_gateway::::::::* versions from (including) 18.8.0 up to (including) 18.8.9 cpe:2.3:a:oracle:primavera_gateway::::::::* versions from (including) 19.12.0 up to (including) 19.12.4 cpe:2.3:a:oracle:primavera_unifier:16.1::::::: cpe:2.3:a:oracle:primavera_unifier:16.2::::::: cpe:2.3:a:oracle:primavera_unifier::::::::* versions from (including) 17.7 up to (including) 17.12 cpe:2.3:a:oracle:primavera_unifier:18.8::::::: cpe:2.3:a:oracle:real-time_scheduler::::::::* versions from (including) 2.3.0.1 up to (including) 2.3.0.3 cpe:2.3:a:oracle:rest_data_services:11.2.0.4::::-:::* cpe:2.3:a:oracle:rest_data_services:12.1.0.2::::-:::* cpe:2.3:a:oracle:rest_data_services:12.2.0.1::::-:::* cpe:2.3:a:oracle:rest_data_services:18c::::-:::* cpe:2.3:a:oracle:rest_data_services:19c::::-:::* cpe:2.3:a:oracle:retail_back_office:14.0::::::: cpe:2.3:a:oracle:retail_back_office:14.1::::::: cpe:2.3:a:oracle:retail_central_office:14.0::::::: cpe:2.3:a:oracle:retail_central_office:14.1::::::: cpe:2.3:a:oracle:retail_customer_insights:15.0::::::: cpe:2.3:a:oracle:retail_customer_insights:16.0::::::: cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0::::::: cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0::::::: cpe:2.3:a:oracle:retail_point-of-service:14.0::::::: cpe:2.3:a:oracle:retail_point-of-service:14.1::::::: cpe:2.3:a:oracle:retail_returns_management:14.0::::::: cpe:2.3:a:oracle:retail_returns_management:14.1::::::: cpe:2.3:a:oracle:service_bus:11.1.1.9.0::::::: cpe:2.3:a:oracle:service_bus:12.1.3.0.0::::::: cpe:2.3:a:oracle:service_bus:12.2.1.3.0::::::: cpe:2.3:a:oracle:siebel_mobile_applications::::::::* versions up to (including) 19.8 cpe:2.3:a:oracle:siebel_ui_framework:20.8::::::: cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.0::::::: cpe:2.3:a:oracle:system_utilities:19.1::::::: cpe:2.3:a:oracle:tape_library_acsls:8.5::::::: cpe:2.3:a:oracle:tape_library_acsls:8.5.1::::::: cpe:2.3:a:oracle:transportation_management:1.4.3::::::: cpe:2.3:a:oracle:utilities_mobile_workforce_management::::::::* versions from (including) 2.3.0.1 up to (including) 2.3.0.3 cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0::::::: cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0::::::: cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0::::::: cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0::::::: cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0::::::: cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::	OR cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1::::::: cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0::::::: cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0::::::: cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0::::::: cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0::::::: cpe:2.3:a:oracle:application_express::::::::* versions up to (excluding) 19.1 cpe:2.3:a:oracle:application_service_level_management:13.2.0.0::::::: cpe:2.3:a:oracle:application_service_level_management:13.3.0.0::::::: cpe:2.3:a:oracle:application_testing_suite:12.5.0.3::::::: cpe:2.3:a:oracle:application_testing_suite:13.1.0.1::::::: cpe:2.3:a:oracle:application_testing_suite:13.2::::::: cpe:2.3:a:oracle:application_testing_suite:13.2.0.1::::::: cpe:2.3:a:oracle:application_testing_suite:13.3::::::: cpe:2.3:a:oracle:application_testing_suite:13.3.0.1::::::: cpe:2.3:a:oracle:banking_digital_experience:18.1::::::: cpe:2.3:a:oracle:banking_digital_experience:18.2::::::: cpe:2.3:a:oracle:banking_digital_experience:18.3::::::: cpe:2.3:a:oracle:banking_digital_experience:19.1::::::: cpe:2.3:a:oracle:banking_digital_experience:19.2::::::: cpe:2.3:a:oracle:banking_digital_experience:20.1::::::: cpe:2.3:a:oracle:banking_enterprise_collections::::::::* versions from (including) 2.7.0 up to (including) 2.8.0 cpe:2.3:a:oracle:banking_platform::::::::* versions from (including) 2.4.0 up to (including) 2.10.0 cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0::::::: cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0::::::: cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0::::::: cpe:2.3:a:oracle:big_data_discovery:1.6::::::: cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0::::::: cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0::::::: cpe:2.3:a:oracle:communications_analytics:12.1.1::::::: cpe:2.3:a:oracle:communications_application_session_controller:3.8m0::::::: cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5::::::: cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0::::::: cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0::::::: cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0::::::: cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0::::::: cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1::::::: cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2::::::: cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1::::::: cpe:2.3:a:oracle:communications_element_manager:8.1.1::::::: cpe:2.3:a:oracle:communications_element_manager:8.2.0::::::: cpe:2.3:a:oracle:communications_element_manager:8.2.1::::::: cpe:2.3:a:oracle:communications_interactive_session_recorder::::::::* versions from (including) 6.0 up to (including) 6.4 cpe:2.3:a:oracle:communications_operations_monitor:3.4::::::: cpe:2.3:a:oracle:communications_operations_monitor:4.0::::::: cpe:2.3:a:oracle:communications_operations_monitor::::::::* versions from (including) 4.1 up to (including) 4.3 cpe:2.3:a:oracle:communications_operations_monitor:4.1.0::::::: cpe:2.3:a:oracle:communications_session_report_manager:8.1.1::::::: cpe:2.3:a:oracle:communications_session_report_manager:8.2.0::::::: cpe:2.3:a:oracle:communications_session_report_manager:8.2.1::::::: cpe:2.3:a:oracle:communications_session_route_manager:8.1.1::::::: cpe:2.3:a:oracle:communications_session_route_manager:8.2.0::::::: cpe:2.3:a:oracle:communications_session_route_manager:8.2.1::::::: cpe:2.3:a:oracle:communications_unified_inventory_management:7.3::::::: cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0::::::: cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2::::::: cpe:2.3:a:oracle:diagnostic_assistant:2.12.36::::::: cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3::::::: cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0::::::: cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0::::::: cpe:2.3:a:oracle:enterprise_session_border_controller:8.4::::::: cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure::::::::* versions from (including) 7.3.3 up to (including) 7.3.5 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure::::::::* versions from (including) 8.0.2 up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0::::::: cpe:2.3:a:oracle:financial_services_asset_liability_management::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0::::::: cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8::::::: cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0::::::: cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0::::::: cpe:2.3:a:oracle:financial_services_data_foundation::::::::* versions from (including) 8.0.4 up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting::::::::* versions from (including) 8.0.6 up to (including) 8.0.9 cpe:2.3:a:oracle:financial_services_data_integration_hub::::::::* versions from (including) 8.0.5 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0::::::: cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.6::::::: cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.7::::::: cpe:2.3:a:oracle:financial_services_funds_transfer_pricing::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0::::::: cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0::::::: cpe:2.3:a:oracle:financial_services_institutional_performance_analytics::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.0.1.0::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.2::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.4.0.0::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.5.0.0::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8::::::: cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0::::::: cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning::::::::* versions from (including) 8.0.2 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0::::::: cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5::::::: cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6::::::: cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8::::::: cpe:2.3:a:oracle:financial_services_price_creation_and_discovery::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0::::::: cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4::::::: cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.6::::::: cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.7::::::: cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_retail_customer_analytics::::::::* versions from (including) 8.0.4 up to (including) 8.0.6 cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.6::::::: cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.7::::::: cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.0::::::: cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.1::::::: cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0::::::: cpe:2.3:a:oracle:healthcare_foundation:7.1.1::::::: cpe:2.3:a:oracle:healthcare_foundation:7.2.0::::::: cpe:2.3:a:oracle:healthcare_foundation:7.2.2::::::: cpe:2.3:a:oracle:healthcare_foundation:7.3.0::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.1.0::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.2.1::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.3.1::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.3.2::::::: cpe:2.3:a:oracle:healthcare_translational_research:3.4.0::::::: cpe:2.3:a:oracle:hospitality_guest_access:4.2.0::::::: cpe:2.3:a:oracle:hospitality_guest_access:4.2.1::::::: cpe:2.3:a:oracle:hospitality_materials_control:18.1::::::: cpe:2.3:a:oracle:hospitality_simphony:18.1::::::: cpe:2.3:a:oracle:hospitality_simphony:18.2::::::: cpe:2.3:a:oracle:hospitality_simphony::::::::* versions from (including) 19.1.0 up to (including) 19.1.2 cpe:2.3:a:oracle:identity_manager:12.2.1.3.0::::::: cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9::::::: cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8::::::: cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0::::::: cpe:2.3:a:oracle:insurance_data_foundation::::::::* versions from (including) 8.0.4 up to (including) 8.0.7 cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.6::::::: cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.7::::::: cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting::::::::* versions from (including) 5.0.0.0 up to (including) 5.6.0.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0::::::: cpe:2.3:a:oracle:insurance_performance_insight:8.0.7::::::: cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2::::::: cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0::::::: cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0::::::: cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0::::::: cpe:2.3:a:oracle:jdeveloper_and_adf:11.1.1.9.0::::::: cpe:2.3:a:oracle:jdeveloper_and_adf:12.1.3.0.0::::::: cpe:2.3:a:oracle:jdeveloper_and_adf:12.2.1.3.0::::::: cpe:2.3:a:oracle:knowledge::::::::* versions from (including) 8.6.0 up to (including) 8.6.3 cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55::::::: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56::::::: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57::::::: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58::::::: cpe:2.3:a:oracle:policy_automation:10.4.7::::::: cpe:2.3:a:oracle:policy_automation:12.1.0::::::: cpe:2.3:a:oracle:policy_automation:12.1.1::::::: cpe:2.3:a:oracle:policy_automation::::::::* versions from (including) 12.2.0 up to (including) 12.2.15 cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6::::::: cpe:2.3:a:oracle:policy_automation_for_mobile_devices::::::::* versions from (including) 12.2.0 up to (including) 12.2.15 cpe:2.3:a:oracle:primavera_gateway:15.2.18::::::: cpe:2.3:a:oracle:primavera_gateway::::::::* versions from (including) 16.2.0 up to (including) 16.2.11 cpe:2.3:a:oracle:primavera_gateway::::::::* versions from (including) 17.12.0 up to (including) 17.12.7 cpe:2.3:a:oracle:primavera_gateway::::::::* versions from (including) 18.8.0 up to (including) 18.8.9 cpe:2.3:a:oracle:primavera_gateway::::::::* versions from (including) 19.12.0 up to (including) 19.12.4 cpe:2.3:a:oracle:primavera_unifier:16.1::::::: cpe:2.3:a:oracle:primavera_unifier:16.2::::::: cpe:2.3:a:oracle:primavera_unifier::::::::* versions from (including) 17.7 up to (including) 17.12 cpe:2.3:a:oracle:primavera_unifier:18.8::::::: cpe:2.3:a:oracle:real-time_scheduler::::::::* versions from (including) 2.3.0.1 up to (including) 2.3.0.3 cpe:2.3:a:oracle:rest_data_services:11.2.0.4::::-:::* cpe:2.3:a:oracle:rest_data_services:12.1.0.2::::-:::* cpe:2.3:a:oracle:rest_data_services:12.2.0.1::::-:::* cpe:2.3:a:oracle:rest_data_services:18c::::-:::* cpe:2.3:a:oracle:rest_data_services:19c::::-:::* cpe:2.3:a:oracle:retail_back_office:14.0::::::: cpe:2.3:a:oracle:retail_back_office:14.1::::::: cpe:2.3:a:oracle:retail_central_office:14.0::::::: cpe:2.3:a:oracle:retail_central_office:14.1::::::: cpe:2.3:a:oracle:retail_customer_insights:15.0::::::: cpe:2.3:a:oracle:retail_customer_insights:16.0::::::: cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0::::::: cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0::::::: cpe:2.3:a:oracle:retail_point-of-service:14.0::::::: cpe:2.3:a:oracle:retail_point-of-service:14.1::::::: cpe:2.3:a:oracle:retail_returns_management:14.0::::::: cpe:2.3:a:oracle:retail_returns_management:14.1::::::: cpe:2.3:a:oracle:service_bus:11.1.1.9.0::::::: cpe:2.3:a:oracle:service_bus:12.1.3.0.0::::::: cpe:2.3:a:oracle:service_bus:12.2.1.3.0::::::: cpe:2.3:a:oracle:siebel_mobile_applications::::::::* versions up to (including) 19.8 cpe:2.3:a:oracle:siebel_ui_framework:20.8::::::: cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.0::::::: cpe:2.3:a:oracle:system_utilities:19.1::::::: cpe:2.3:a:oracle:tape_library_acsls:8.5::::::: cpe:2.3:a:oracle:tape_library_acsls:8.5.1::::::: cpe:2.3:a:oracle:transportation_management:1.4.3::::::: cpe:2.3:a:oracle:utilities_mobile_workforce_management::::::::* versions from (including) 2.3.0.1 up to (including) 2.3.0.3 cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0::::::: cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0::::::: cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0::::::: cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0::::::: cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0::::::: cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:joomla:joomla\!::::::::* versions from (including) 3.0.0 up to (including) 3.9.4

Browse by Apps

CVE-2019-11358

Drupal Backdrop CMS jQuery Prototype Pollution

Description

INFO

April 20, 2019, 12:29 a.m.

Nov. 21, 2024, 4:20 a.m.

Yes !

Affected Products

CVSS Scores

Solution

Public PoC/Exploit Available at Github

References to Advisories, Solutions, and Tools

CWE - Common Weakness Enumeration

Common Attack Pattern Enumeration and Classification (CAPEC)

VERT Threat Alert: February 2025 Patch Tuesday Analysis

CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List

CVE Modified by af854a3a-2127-422b-91ae-364da2661108

CVE Modified by [email protected]

Modified Analysis by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

Modified Analysis by [email protected]

CVE Modified by [email protected]

Modified Analysis by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

Modified Analysis by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

Modified Analysis by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

Modified Analysis by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

Initial Analysis by [email protected]