CVEvulnerability

CVE-2015-9251

6.1 MEDIUM Published 2018-01-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-01-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

Affected configurations

• jquery jquery (< 3.0.0) • oracle agile product lifecycle management for process 6.2.0.0 • oracle agile product lifecycle management for process 6.2.1.0 • oracle agile product lifecycle management for process 6.2.2.0 • oracle agile product lifecycle management for process 6.2.3.0 • oracle agile product lifecycle management for process 6.2.3.1 • oracle banking platform 2.6.0 • oracle banking platform 2.6.1 • oracle banking platform 2.6.2 • oracle business process management suite 11.1.1.9.0 • oracle business process management suite 12.1.3.0.0 • oracle business process management suite 12.2.1.3.0 • oracle communications converged application server (< 7.0.0.1) • oracle communications interactive session recorder 6.0 • oracle communications interactive session recorder 6.1 • oracle communications interactive session recorder 6.2 • oracle communications services gatekeeper (< 6.1.0.4.0) • oracle communications webrtc session controller (< 7.2) • oracle endeca information discovery studio 3.1.0 • oracle endeca information discovery studio 3.2.0 • oracle enterprise manager ops center 12.2.2 • oracle enterprise manager ops center 12.3.3 • oracle enterprise operations monitor 3.4 • oracle enterprise operations monitor 4.0 • oracle financial services analytical applications infrastructure (>= 7.3.3 <= 7.3.5) • oracle financial services analytical applications infrastructure (>= 8.0.0 <= 8.0.7) • oracle financial services asset liability management (>= 8.0.4 <= 8.0.7) • oracle financial services data integration hub (>= 8.0.5 <= 8.0.7) • oracle financial services funds transfer pricing (>= 8.0.4 <= 8.0.7) • oracle financial services hedge management and ifrs valuations (>= 8.0.4 <= 8.0.7) • oracle financial services liquidity risk management (>= 8.0.2 <= 8.0.6) • oracle financial services loan loss forecasting and provisioning (>= 8.0.2 <= 8.0.7) • oracle financial services market risk measurement and management 8.0.5 • oracle financial services market risk measurement and management 8.0.6 • oracle financial services profitability management (>= 8.0.4 <= 8.0.6) • oracle financial services reconciliation framework 8.0.5 • oracle financial services reconciliation framework 8.0.6 • oracle fusion middleware mapviewer 12.2.1.3.0 • oracle healthcare foundation 7.1 • oracle healthcare foundation 7.2 • oracle healthcare translational research 3.1.0 • oracle hospitality cruise fleet management 9.0.11 • oracle hospitality guest access 4.2.0 • oracle hospitality guest access 4.2.1 • oracle hospitality materials control 18.1 • oracle hospitality reporting and analytics 9.1.0 • oracle insurance insbridge rating and underwriting 5.2 • oracle insurance insbridge rating and underwriting 5.4 • oracle insurance insbridge rating and underwriting 5.5 • oracle jd edwards enterpriseone tools 9.2 • oracle jdeveloper 11.1.1.9.0 • oracle jdeveloper 12.1.3.0.0 • oracle jdeveloper 12.2.1.3.0 • oracle oss support tools 19.1 • oracle peoplesoft enterprise peopletools 8.55 • oracle peoplesoft enterprise peopletools 8.56 • oracle peoplesoft enterprise peopletools 8.57 • oracle primavera gateway 15.2 • oracle primavera gateway 16.2 • oracle primavera gateway 17.12 … and 21 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References