Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

agile_product_supplier_collaboration_for_process

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

1
Related CVEsRelated VendorsRelated AssignersReports
1Vulnerabilities found
CVE-2020-11022
Assigner-GitHub, Inc.
ShareView Details
Assigner-GitHub, Inc.
CVSS Score-6.9||MEDIUM
EPSS-99.02% / 99.93%
||
7 Day CHG~0.00%
Published-29 Apr, 2020 | 00:00
Updated-13 Apr, 2026 | 15:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
jQuery has a potential XSS vulnerability

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Action-Not Available
Vendor-Oracle CorporationDebian GNU/LinuxThe Drupal AssociationopenSUSETenable, Inc.NetApp, Inc.Fedora ProjectjQuery (OpenJS Foundation)
Product-retail_returns_managementh300epolicy_automationfinancial_services_basel_regulatory_capital_basicstoragetek_acslslog_correlation_enginecommunications_eagle_application_processordebian_linuxpeoplesoft_enterprise_peopletoolsfinancial_services_loan_loss_forecasting_and_provisioningh300s_firmwareagile_product_supplier_collaboration_for_processagile_product_lifecycle_management_for_processh410c_firmwarefinancial_services_price_creation_and_discoveryh700s_firmwareh300e_firmwarefinancial_services_market_risk_measurement_and_managementsnap_creator_frameworkfinancial_services_data_foundationh300sh500e_firmwareenterprise_session_border_controllerhospitality_materials_controlfinancial_services_analytical_applications_infrastructurejdeveloperfinancial_services_liquidity_risk_managementcommunications_webrtc_session_controlleroncommand_system_managerpolicy_automation_connector_for_siebelfinancial_services_hedge_management_and_ifrs_valuationsbanking_digital_experiencecommunications_diameter_signaling_router_idih\application_testing_suitefinancial_services_regulatory_reporting_for_us_federal_reserveleapcommunications_services_gatekeeperh410s_firmwareh500sh410cjqueryinsurance_insbridge_rating_and_underwritingweblogic_serverfinancial_services_profitability_managementhealthcare_foundationfinancial_services_data_integration_hubfinancial_services_analytical_applications_reconciliation_frameworkfinancial_services_basel_regulatory_capital_internal_ratings_based_approachoncommand_insightfinancial_services_funds_transfer_pricinginsurance_data_foundationfinancial_services_institutional_performance_analyticsfinancial_services_data_governance_for_us_regulatory_reportingh700e_firmwarecommunications_application_session_controllerhospitality_simphonyh500s_firmwareh410sinsurance_allocation_manager_for_enterprise_profitabilityfinancial_services_asset_liability_managementfinancial_services_regulatory_reporting_for_european_banking_authorityh500eblockchain_platformh700edrupalmax_datafinancial_services_balance_sheet_planningh700sretail_back_officesiebel_ui_frameworkpolicy_automation_for_mobile_devicesfinancial_services_liquidity_risk_measurement_and_managementcommunications_billing_and_revenue_managemententerprise_manager_ops_centersnapcenterretail_customer_management_and_segmentation_foundationfedorainsurance_accounting_analyzerjQuery
CWE ID-CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')