CVEvulnerability
CVE-2016-7103
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-03-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
Affected configurations
• jqueryui jquery ui (>= 1.10.0 <= 1.11.4)
• oracle application express (< 19.1)
• oracle business intelligence 12.2.1.3.0
• oracle business intelligence 12.2.1.4.0
• oracle hospitality cruise fleet management 9.0.11
• oracle oss support tools (< 2.12.42)
• oracle oss support tools 2.12.42
• oracle primavera unifier (>= 16.0 <= 16.2)
• oracle primavera unifier (>= 17.0 <= 17.12.4)
• oracle primavera unifier (>= 18.0 <= 18.8.4)
• oracle siebel ui framework (<= 21.2)
• oracle weblogic server 10.3.6.0.0
• oracle weblogic server 12.1.3.0.0
• oracle weblogic server 12.2.1.3.0
• fedoraproject fedora 30
• fedoraproject fedora 35
• fedoraproject fedora 36
• netapp snapcenter
• redhat openstack 7.0
• redhat openstack 8
• redhat openstack 9
• juniper junos 21.2
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://rhn.redhat.com/errata/RHSA-2016-2932.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2933.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0161.html Third Party Advisory, VDB Entry
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch, Third Party Advisory
- http://www.securityfocus.com/bid/104823 Broken Link, Third Party Advisory, VDB Entry
- https://github.com/jquery/api.jqueryui.com/issues/281 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://github.com/jquery/jquery-ui/commit/9644e7bae9116edaf8d37c5b38cb32b892f10ff6 Patch, Third Party Advisory
- https://jqueryui.com/changelog/1.12.0/ Release Notes, Vendor Advisory
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2I4UHPIW26FIALH7GGZ3IYUUA53VOOJ/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/ Mailing List, Third Party Advisory
- https://nodesecurity.io/advisories/127 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190416-0007/ Third Party Advisory
- https://www.drupal.org/sa-core-2022-002 Third Party Advisory
- https://www.oracle.com//security-alerts/cpujul2021.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpujan2022.html Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch, Third Party Advisory
- https://www.tenable.com/security/tns-2016-19 Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2932.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2933.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0161.html Third Party Advisory, VDB Entry
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch, Third Party Advisory
- http://www.securityfocus.com/bid/104823 Broken Link, Third Party Advisory, VDB Entry
- https://github.com/jquery/api.jqueryui.com/issues/281 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://github.com/jquery/jquery-ui/commit/9644e7bae9116edaf8d37c5b38cb32b892f10ff6 Patch, Third Party Advisory
- https://jqueryui.com/changelog/1.12.0/ Release Notes, Vendor Advisory
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2I4UHPIW26FIALH7GGZ3IYUUA53VOOJ/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/ Mailing List, Third Party Advisory
- https://nodesecurity.io/advisories/127 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190416-0007/ Third Party Advisory
- https://www.drupal.org/sa-core-2022-002 Third Party Advisory
- https://www.oracle.com//security-alerts/cpujul2021.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpujan2022.html Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch, Third Party Advisory
- https://www.tenable.com/security/tns-2016-19 Third Party Advisory