Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2020-11022
CVE information
Published
Last Modified
CVSSv2.0 Severity
CVSSv3.1 Severity
Impact Analysis
Description
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0..
CVSSv2.0 Score
- Severity
- Medium
- Base Score
- 4.3/10
- Exploit Score
- 8.6/10
- Access Vector
- Network
- Access Complexity
- Medium
- Authentication Required
- None
- Impact Score
- 2.9/10
- Confidentiality Impact
- None
- Availability Impact
- None
- Integrity Impact
- Partial
CVSSv3.1 Score
- Severity
- Medium
- Base Score
- 6.1/10
- Exploit Score
- 2.8/10
- Access Vector
- Network
- Access Complexity
- Low
- Privileges Required
- None
- Impact Score
- 2.7/10
- Confidentiality Impact
- Low
- Availability Impact
- None
- Integrity Impact
- Low
- Scope
- Changed
- User Interaction
- Required
Products Affected
| CPE | Affected | Vulnerable | Excluding | Edit |
|---|---|---|---|---|
| cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* |
Yes
|
1.2 | 3.5.0 | |
| cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* |
Yes
|
7.0 | 7.70 | |
| cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* |
Yes
|
8.7.0 | 8.7.14 | |
| cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* |
Yes
|
8.8.0 | 8.8.6 | |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_webrtc_session_controller:7. |
Yes
|
- | - | |
| cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:agile_product_lifecycle_management_for_proc |
Yes
|
- | - | |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_market_risk_measurement_ |
Yes
|
- | - | |
| cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_hedge_management_and_ifr |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_an |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_asset_liability_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_asset_liability_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_profitability_management |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_profitability_management |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_price_creation_and_disco |
Yes
|
- | - | |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_liquidity_risk_managemen |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_liquidity_risk_measureme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_liquidity_risk_measureme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_analytical_applications_ |
Yes
|
8.0.6.0.0 | - | |
| cpe:2.3:a:oracle:retail_customer_management_and_segmentation |
Yes
|
- | - | |
| cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:healthcare_foundation:7.2.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_billing_and_revenue_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_billing_and_revenue_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_governance_for_us_r |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:* |
Yes
|
19.1.0 | - | |
| cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_basel_regulatory_capital |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:* |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_price_creation_and_disco |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_profitability_management |
Yes
|
- | - | |
| cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* |
Yes
|
12.2.0 | - | |
| cpe:2.3:a:oracle:financial_services_analytical_applications_ |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_an |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_basel_regulatory_capital |
Yes
|
- | - | |
| cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_application_session_controll |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_institutional_performanc |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_diameter_signaling_router_id |
Yes
|
8.0.0 | - | |
| cpe:2.3:a:oracle:financial_services_institutional_performanc |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*: |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting |
Yes
|
5.0.0.0 | - | |
| cpe:2.3:a:oracle:financial_services_liquidity_risk_measureme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_institutional_performanc |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_basel_regulatory_capital |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_regulatory_reporting_for |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_regulatory_reporting_for |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*: |
Yes
|
12.2.0 | - | |
| cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise |
Yes
|
- | - | |
| cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting |
Yes
|
- | - | |
| cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_basel_regulatory_capital |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_hedge_management_and_ifr |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_analytical_applications_ |
Yes
|
- | - | |
| cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise |
Yes
|
- | - | |
| cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_asset_liability_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_market_risk_measurement_ |
Yes
|
- | - | |
| cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_eagle_application_processor: |
Yes
|
16.1.0 | - | |
| cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:* |
Yes
|
- | 21.1.2 | |
| cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* |
Yes
|
3.0 | - | |
| cpe:2.3:a:netapp:max_data:-:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* |
Yes
|
- | 6.0.9 | |
| cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:agile_product_supplier_collaboration_for_pr |
Yes
|
- | - | |
| cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_webrtc_session_controller:7. |
Yes
|
- | - | |
| cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_market_risk_measurement_ |
Yes
|
- | - | |
| cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_hedge_management_and_ifr |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_an |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_asset_liability_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_asset_liability_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_profitability_management |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_profitability_management |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_price_creation_and_disco |
Yes
|
- | - | |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_liquidity_risk_managemen |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_liquidity_risk_measureme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_liquidity_risk_measureme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_analytical_applications_ |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:retail_customer_management_and_segmentation |
Yes
|
- | - | |
| cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:healthcare_foundation:7.2.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_billing_and_revenue_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_billing_and_revenue_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_governance_for_us_r |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_basel_regulatory_capital |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_price_creation_and_disco |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_profitability_management |
Yes
|
- | - | |
| cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* |
Yes
|
12.2.0 | - | |
| cpe:2.3:a:oracle:financial_services_analytical_applications_ |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_an |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_basel_regulatory_capital |
Yes
|
- | - | |
| cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_application_session_controll |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_institutional_performanc |
Yes
|
- | - | |
| cpe:2.3:a:oracle:communications_diameter_signaling_router_id |
Yes
|
8.0.0 | - | |
| cpe:2.3:a:oracle:financial_services_institutional_performanc |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*: |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting |
Yes
|
5.0.0.0 | - | |
| cpe:2.3:a:oracle:financial_services_liquidity_risk_measureme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_institutional_performanc |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_basel_regulatory_capital |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_regulatory_reporting_for |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_regulatory_reporting_for |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*: |
Yes
|
12.2.0 | - | |
| cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise |
Yes
|
- | - | |
| cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting |
Yes
|
- | - | |
| cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_basel_regulatory_capital |
Yes
|
8.0.6 | - | |
| cpe:2.3:a:oracle:financial_services_hedge_management_and_ifr |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_analytical_applications_ |
Yes
|
- | - | |
| cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise |
Yes
|
- | - | |
| cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_asset_liability_manageme |
Yes
|
- | - | |
| cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_market_risk_measurement_ |
Yes
|
- | - | |
| cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0 |
Yes
|
- | - | |
| cpe:2.3:a:oracle:hospitality_simphony:19.1.0-19.1.2:*:*:*:*: |
Yes
|
- | - | |
| cpe:2.3:a:oracle:insurance_data_foundation:8.0.6-8.1.0:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:* |
Yes
|
18.1 | - |
References
- https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
- https://jquery.com/upgrade-guide/3.5/
- https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77
- https://security.netapp.com/advisory/ntap-20200511-0006/
- https://www.drupal.org/sa-core-2020-002
- https://www.debian.org/security/2020/dsa-4693
- https://www.oracle.com/security-alerts/cpujul2020.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html
- https://security.gentoo.org/glsa/202007-03
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html
- https://www.tenable.com/security/tns-2020-10
- https://www.tenable.com/security/tns-2020-11
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.tenable.com/security/tns-2021-02
- https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html
- http://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html
- https://www.tenable.com/security/tns-2021-10
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org
- https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org
- https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c
- https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c
- https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b
- https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d29
- https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c4
- https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965
- https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabe
- https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7
- https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2
- https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1