CVE-2019-11358 : jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Published 2019-04-20 00:29:00

Updated 2024-02-16 16:32:51

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2019-11358

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Redhat » Cloudforms » Version: 4.7
cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:*
Matching versions
Redhat » Virtualization Manager » Version: 4.3
cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:*
Matching versions
Oracle » Jdeveloper » Version: 11.1.1.9.0
cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*
Matching versions
Oracle » Jdeveloper » Version: 12.2.1.3.0
cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Jdeveloper » Version: 12.2.1.4.0
cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.55
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*
Matching versions
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.56
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*
Matching versions
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.57
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*
Matching versions
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.58
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*
Matching versions
Oracle » Application Express
Versions before (<) 19.1
cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*
Matching versions
Oracle » Weblogic Server » Version: 10.3.6.0.0
cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Weblogic Server » Version: 12.1.3.0.0
cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Weblogic Server » Version: 12.2.1.3.0
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Weblogic Server » Version: 12.2.1.4.0
cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Weblogic Server » Version: 14.1.1.0.0
cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*
Matching versions
Oracle » Identity Manager » Version: 12.2.1.3.0
cpe:2.3:a:oracle:identity_manager:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Application Testing Suite » Version: 12.5.0.3
cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:*
Matching versions
Oracle » Application Testing Suite » Version: 13.3.0.1
cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
Matching versions
Oracle » Application Testing Suite » Version: 13.2.0.1
cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:*
Matching versions
Oracle » Application Testing Suite » Version: 13.1.0.1
cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:*
Matching versions
Oracle » Application Testing Suite » Version: 13.2
cpe:2.3:a:oracle:application_testing_suite:13.2:*:*:*:*:*:*:*
Matching versions
Oracle » Application Testing Suite » Version: 13.3
cpe:2.3:a:oracle:application_testing_suite:13.3:*:*:*:*:*:*:*
Matching versions
Oracle » Webcenter Sites » Version: 12.2.1.3.0
cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Transportation Management » Version: 1.4.3
cpe:2.3:a:oracle:transportation_management:1.4.3:*:*:*:*:*:*:*
Matching versions
Oracle » Siebel Ui Framework » Version: 20.8
cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:*
Matching versions
Oracle » Knowledge
Versions from including (>=) 8.6.0 and up to, including, (<=) 8.6.3
cpe:2.3:a:oracle:knowledge:*:*:*:*:*:*:*:*
Matching versions
Oracle » Enterprise Manager Ops Center » Version: 12.3.3
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*
Matching versions
Oracle » Enterprise Manager Ops Center » Version: 12.4.0
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Enterprise Manager Ops Center » Version: 12.4.0.0
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Operations Monitor
Versions from including (>=) 4.1 and up to, including, (<=) 4.3
cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Operations Monitor » Version: 3.4
cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Operations Monitor » Version: 4.0
cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Operations Monitor » Version: 4.1.0
cpe:2.3:a:oracle:communications_operations_monitor:4.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Eagle Application Processor
Versions from including (>=) 16.1.0 and up to, including, (<=) 16.4.0
cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:*
Matching versions
Oracle » Banking Platform
Versions from including (>=) 2.4.0 and up to, including, (<=) 2.10.0
cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*
Matching versions
Oracle » Primavera Gateway
Versions from including (>=) 16.2.0 and up to, including, (<=) 16.2.11
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
Matching versions
Oracle » Primavera Gateway
Versions from including (>=) 19.12.0 and up to, including, (<=) 19.12.4
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
Matching versions
Oracle » Primavera Gateway
Versions from including (>=) 17.12.0 and up to, including, (<=) 17.12.7
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
Matching versions
Oracle » Primavera Gateway
Versions from including (>=) 18.8.0 and up to, including, (<=) 18.8.9
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
Matching versions
Oracle » Primavera Gateway » Version: 15.2.18
cpe:2.3:a:oracle:primavera_gateway:15.2.18:*:*:*:*:*:*:*
Matching versions
Oracle » Primavera Unifier
Versions from including (>=) 17.7 and up to, including, (<=) 17.12
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
Matching versions
Oracle » Primavera Unifier » Version: 18.8
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
Matching versions
Oracle » Primavera Unifier » Version: 16.1
cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
Matching versions
Oracle » Primavera Unifier » Version: 16.2
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
Matching versions
Oracle » Service Bus » Version: 12.1.3.0.0
cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Service Bus » Version: 12.2.1.3.0
cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Service Bus » Version: 11.1.1.9.0
cpe:2.3:a:oracle:service_bus:11.1.1.9.0:*:*:*:*:*:*:*
Matching versions
Oracle » Fusion Middleware Mapviewer » Version: 12.2.1.3.0
cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Real-time Scheduler
Versions from including (>=) 2.3.0.1 and up to, including, (<=) 2.3.0.3
cpe:2.3:a:oracle:real-time_scheduler:*:*:*:*:*:*:*:*
Matching versions
Oracle » Hospitality Simphony
Versions from including (>=) 19.1.0 and up to, including, (<=) 19.1.2
cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:*
Matching versions
Oracle » Hospitality Simphony » Version: 18.1
cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:*
Matching versions
Oracle » Hospitality Simphony » Version: 18.2
cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:*
Matching versions
Oracle » Hospitality Guest Access » Version: 4.2.0
cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*
Matching versions
Oracle » Hospitality Guest Access » Version: 4.2.1
cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*
Matching versions
Oracle » Hospitality Materials Control » Version: 18.1
cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Back Office » Version: 14.1
cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Back Office » Version: 14.0
cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Webrtc Session Controller » Version: 7.2
cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Point-of-service » Version: 14.0
cpe:2.3:a:oracle:retail_point-of-service:14.0:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Point-of-service » Version: 14.1
cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Market Risk Measurement And Management » Version: 8.0.5
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Market Risk Measurement And Management » Version: 8.0.6
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Market Risk Measurement And Management » Version: 8.0.8
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Price Creation And Discovery
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Asset Liability Management
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Asset Liability Management » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Analytical Applications Reconciliation Framework
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Analytical Applications Reconciliation Framework » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Funds Transfer Pricing
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Funds Transfer Pricing » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Profitability Management
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Profitability Management » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Liquidity Risk Management » Version: 8.0.4.0.0
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.4.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Liquidity Risk Management » Version: 8.0.5.0.0
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.5.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Liquidity Risk Management » Version: 8.0.0.1.0
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.0.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Liquidity Risk Management » Version: 8.0.2
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.2:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Liquidity Risk Management » Version: 8.0.6
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Loan Loss Forecasting And Provisioning
Versions from including (>=) 8.0.2 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Loan Loss Forecasting And Provisioning » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Hedge Management And Ifrs Valuations
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Hedge Management And Ifrs Valuations » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Balance Sheet Planning » Version: 8.0.8
cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Analytical Applications Infrastructure
Versions from including (>=) 7.3.3 and up to, including, (<=) 7.3.5
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Analytical Applications Infrastructure
Versions from including (>=) 8.0.2 and up to, including, (<=) 8.1.0
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Unified Inventory Management » Version: 7.4.0
cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Unified Inventory Management » Version: 7.3
cpe:2.3:a:oracle:communications_unified_inventory_management:7.3:*:*:*:*:*:*:*
Matching versions
Oracle » Agile Product Lifecycle Management For Process » Version: 6.2.0.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Agile Product Lifecycle Management For Process » Version: 6.2.1.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Agile Product Lifecycle Management For Process » Version: 6.2.2.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:*
Matching versions
Oracle » Agile Product Lifecycle Management For Process » Version: 6.2.3.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Agile Product Lifecycle Management For Process » Version: 6.1
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Returns Management » Version: 14.0
cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Returns Management » Version: 14.1
cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Central Office » Version: 14.1
cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Central Office » Version: 14.0
cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Basel Regulatory Capital Basic
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Basel Regulatory Capital Basic » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Basel Regulatory Capital Internal Ratings Based Approach
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Basel Regulatory Capital Internal Ratings Based Approach » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Business Process Management Suite » Version: 12.2.1.3.0
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Business Process Management Suite » Version: 12.2.1.4.0
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Customer Management And Segmentation Foundation » Version: 18.0
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Customer Management And Segmentation Foundation » Version: 19.0
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*
Matching versions
Oracle » Big Data Discovery » Version: 1.6
cpe:2.3:a:oracle:big_data_discovery:1.6:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Diameter Signaling Router » Version: 8.0.0
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Diameter Signaling Router » Version: 8.1
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Diameter Signaling Router » Version: 8.2
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Diameter Signaling Router » Version: 8.2.1
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Customer Insights » Version: 16.0
cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:*
Matching versions
Oracle » Retail Customer Insights » Version: 15.0
cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:*
Matching versions
Oracle » Tape Library Acsls » Version: 8.5
cpe:2.3:a:oracle:tape_library_acsls:8.5:*:*:*:*:*:*:*
Matching versions
Oracle » Tape Library Acsls » Version: 8.5.1
cpe:2.3:a:oracle:tape_library_acsls:8.5.1:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Billing And Revenue Management » Version: 7.5
cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Billing And Revenue Management » Version: 12.0
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Billing And Revenue Management » Version: 7.5.0.23.0
cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Billing And Revenue Management » Version: 12.0.0.3.0
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Application Session Controller » Version: 3.8m0
cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:*
Matching versions
Oracle » Bi Publisher » Version: 12.2.1.4.0
cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Bi Publisher » Version: 12.2.1.3.0
cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Bi Publisher » Version: 5.5.0.0.0
cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Policy Automation
Versions from including (>=) 12.2.0 and up to, including, (<=) 12.2.15
cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:*
Matching versions
Oracle » Policy Automation » Version: 12.1.0
cpe:2.3:a:oracle:policy_automation:12.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Policy Automation » Version: 10.4.7
cpe:2.3:a:oracle:policy_automation:10.4.7:*:*:*:*:*:*:*
Matching versions
Oracle » Policy Automation » Version: 12.1.1
cpe:2.3:a:oracle:policy_automation:12.1.1:*:*:*:*:*:*:*
Matching versions
Oracle » Policy Automation Connector For Siebel » Version: 10.4.6
cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:*
Matching versions
Oracle » Policy Automation For Mobile Devices
Versions from including (>=) 12.2.0 and up to, including, (<=) 12.2.15
cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Interactive Session Recorder
Versions from including (>=) 6.0 and up to, including, (<=) 6.4
cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Foundation » Version: 7.1.1
cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Foundation » Version: 7.2.0
cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Foundation » Version: 7.2.2
cpe:2.3:a:oracle:healthcare_foundation:7.2.2:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Foundation » Version: 7.3.0
cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Translational Research » Version: 3.1.0
cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Translational Research » Version: 3.2.1
cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Translational Research » Version: 3.3.1
cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Translational Research » Version: 3.3.2
cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:*
Matching versions
Oracle » Healthcare Translational Research » Version: 3.4.0
cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:*
Matching versions
Oracle » Insurance Insbridge Rating And Underwriting
Versions from including (>=) 5.0.0.0 and up to, including, (<=) 5.6.0.0
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:*
Matching versions
Oracle » Insurance Insbridge Rating And Underwriting » Version: 5.6.1.0
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Utilities Mobile Workforce Management
Versions from including (>=) 2.3.0.1 and up to, including, (<=) 2.3.0.3
cpe:2.3:a:oracle:utilities_mobile_workforce_management:*:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Services Gatekeeper » Version: 7.0
cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Data Integration Hub
Versions from including (>=) 8.0.5 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Data Integration Hub » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Rest Data Services » Version: 11.2.0.4
cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:*
Matching versions
Oracle » Rest Data Services » Version: 12.1.0.2
cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:*
Matching versions
Oracle » Rest Data Services » Version: 12.2.0.1
cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:*
Matching versions
Oracle » Rest Data Services » Version: 18C
cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:*
Matching versions
Oracle » Rest Data Services » Version: 19C
cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:*
Matching versions
Oracle » Communications Element Manager » Version: 8.1.1
cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Element Manager » Version: 8.2.0
cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Element Manager » Version: 8.2.1
cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Session Report Manager » Version: 8.1.1
cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Session Report Manager » Version: 8.2.0
cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Session Report Manager » Version: 8.2.1
cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Session Route Manager » Version: 8.1.1
cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Session Route Manager » Version: 8.2.0
cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Session Route Manager » Version: 8.2.1
cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:*
Matching versions
Oracle » Communications Analytics » Version: 12.1.1
cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:*
Matching versions
Oracle » Application Service Level Management » Version: 13.2.0.0
cpe:2.3:a:oracle:application_service_level_management:13.2.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Application Service Level Management » Version: 13.3.0.0
cpe:2.3:a:oracle:application_service_level_management:13.3.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Banking Digital Experience » Version: 18.1
cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:*
Matching versions
Oracle » Banking Digital Experience » Version: 18.2
cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:*
Matching versions
Oracle » Banking Digital Experience » Version: 18.3
cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:*
Matching versions
Oracle » Banking Digital Experience » Version: 19.1
cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:*
Matching versions
Oracle » Banking Digital Experience » Version: 19.2
cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:*
Matching versions
Oracle » Banking Digital Experience » Version: 20.1
cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*
Matching versions
Oracle » Banking Enterprise Collections
Versions from including (>=) 2.7.0 and up to, including, (<=) 2.8.0
cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:*
Matching versions
Oracle » Diagnostic Assistant » Version: 2.12.36
cpe:2.3:a:oracle:diagnostic_assistant:2.12.36:*:*:*:*:*:*:*
Matching versions
Oracle » Enterprise Session Border Controller » Version: 8.4
cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Data Foundation
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.8
cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Data Governance For Us Regulatory Reporting
Versions from including (>=) 8.0.6 and up to, including, (<=) 8.0.9
cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Enterprise Financial Performance Analytics » Version: 8.0.6
cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.6:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Enterprise Financial Performance Analytics » Version: 8.0.7
cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.7:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Institutional Performance Analytics
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Institutional Performance Analytics » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Liquidity Risk Measurement And Management » Version: 8.0.7
cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Liquidity Risk Measurement And Management » Version: 8.0.8
cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Liquidity Risk Measurement And Management » Version: 8.1.0
cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Regulatory Reporting For De Nederlandsche Bank » Version: 8.0.4
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Regulatory Reporting For European Banking Authority » Version: 8.0.6
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.6:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Regulatory Reporting For European Banking Authority » Version: 8.0.7
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.7:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Regulatory Reporting For Us Federal Reserve
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Retail Customer Analytics
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.6
cpe:2.3:a:oracle:financial_services_retail_customer_analytics:*:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Retail Performance Analytics » Version: 8.0.6
cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.6:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Retail Performance Analytics » Version: 8.0.7
cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.7:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Revenue Management And Billing » Version: 2.4.0.0
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Financial Services Revenue Management And Billing » Version: 2.4.0.1
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.1:*:*:*:*:*:*:*
Matching versions
Oracle » Insurance Accounting Analyzer » Version: 8.0.9
cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:*
Matching versions
Oracle » Insurance Allocation Manager For Enterprise Profitability » Version: 8.0.8
cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:*
Matching versions
Oracle » Insurance Allocation Manager For Enterprise Profitability » Version: 8.1.0
cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:*
Matching versions
Oracle » Insurance Data Foundation
Versions from including (>=) 8.0.4 and up to, including, (<=) 8.0.7
cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:*
Matching versions
Oracle » Insurance Ifrs 17 Analyzer » Version: 8.0.6
cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.6:*:*:*:*:*:*:*
Matching versions
Oracle » Insurance Ifrs 17 Analyzer » Version: 8.0.7
cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.7:*:*:*:*:*:*:*
Matching versions
Oracle » Insurance Performance Insight » Version: 8.0.7
cpe:2.3:a:oracle:insurance_performance_insight:8.0.7:*:*:*:*:*:*:*
Matching versions
Oracle » Jdeveloper And Adf » Version: 11.1.1.9.0
cpe:2.3:a:oracle:jdeveloper_and_adf:11.1.1.9.0:*:*:*:*:*:*:*
Matching versions
Oracle » Jdeveloper And Adf » Version: 12.1.3.0.0
cpe:2.3:a:oracle:jdeveloper_and_adf:12.1.3.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Jdeveloper And Adf » Version: 12.2.1.3.0
cpe:2.3:a:oracle:jdeveloper_and_adf:12.2.1.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » Siebel Mobile Applications
Versions up to, including, (<=) 19.8
cpe:2.3:a:oracle:siebel_mobile_applications:*:*:*:*:*:*:*:*
Matching versions
Oracle » Storagetek Tape Analytics Sw Tool » Version: 2.3.0
cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.0:*:*:*:*:*:*:*
Matching versions
Oracle » System Utilities » Version: 19.1
cpe:2.3:a:oracle:system_utilities:19.1:*:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 21.2
cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*
Matching versions
Drupal » Drupal
Versions from including (>=) 8.5.0 and before (<) 8.5.15
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
Matching versions
Drupal » Drupal
Versions from including (>=) 8.6.0 and before (<) 8.6.15
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
Matching versions
Drupal » Drupal
Versions from including (>=) 7.0 and before (<) 7.66
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
Matching versions
Joomla » Joomla!
Versions from including (>=) 3.0.0 and up to, including, (<=) 3.9.4
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
Matching versions
Jquery » Jquery
Versions before (<) 3.4.0
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 28
cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 29
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 30
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Matching versions
Opensuse » Backports Sle » Version: 15.0 Update SP1
cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
Matching versions
Netapp » Oncommand System Manager
Versions from including (>=) 3.0 and up to, including, (<=) 3.1.3
cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*
Matching versions
Netapp » Snapcenter » Version: N/A
cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
Matching versions
Backdropcms » Backdrop
Versions from including (>=) 1.11.0 and before (<) 1.11.9
cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
Matching versions
Backdropcms » Backdrop
Versions from including (>=) 1.12.0 and before (<) 1.12.6
cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2019-11358

Top countries where our scanners detected CVE-2019-11358

Top open port discovered on systems with this issue 80

IPs affected by CVE-2019-11358 890,784

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2019-11358!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2019-11358

EPSS FAQ

3.39%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 91 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-11358

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2019-11358

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-11358

https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E

[jira] [Assigned] (FLINK-17675) Resolve CVE-2019-11358 from jquery-Apache Mail Archives
Issue Tracking
https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E

[GitHub] [airflow] codecov-io commented on issue #5197: [AIRFLOW-XXX] Fix CVE-2019-11358-Apache Mail Archives
Issue Tracking
https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205@%3Ccommits.airflow.apache.org%3E

[GitHub] [airflow] feng-tao opened a new pull request #5197: [AIRFLOW-XXX] Fix CVE-2019-11358 - Pony Mail
Mailing List;Third Party Advisory
https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f@%3Ccommits.airflow.apache.org%3E

[GitHub] [airflow] XD-DENG commented on issue #5197: [AIRFLOW-XXX] Fix CVE-2019-11358 - Pony Mail
Mailing List;Third Party Advisory
http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html

OctoberCMS Insecure Dependencies ≈ Packet Storm
Third Party Advisory;VDB Entry

CVEs referencing this url
https://www.oracle.com/security-alerts/cpujan2020.html

Oracle Critical Patch Update Advisory - January 2020
Patch;Third Party Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpuoct2020.html

Oracle Critical Patch Update Advisory - October 2020
Patch;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E

[GitHub] [airflow] feng-tao opened a new pull request #5197: [AIRFLOW-XXX] Fix CVE-2019-11358-Apache Mail Archives
Issue Tracking
http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html

dotCMS 5.1.1 Vulnerable Dependencies ≈ Packet Storm
Third Party Advisory;VDB Entry

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html

[SECURITY] [DLA 1797-1] drupal7 security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/

[SECURITY] Fedora 28 Update: drupal7-7.66-1.fc28 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://www.debian.org/security/2019/dsa-4434

Debian -- Security Information -- DSA-4434-1 drupal7
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html

Oracle Critical Patch Update Advisory - April 2020
Patch;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6@%3Ccommits.roller.apache.org%3E

[jira] [Created] (ROL-2150) Fix Js security vulnerabilities detected using retire js - Pony Mail
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E

[GitHub] [airflow] feng-tao commented on issue #5197: [AIRFLOW-XXX] Fix CVE-2019-11358-Apache Mail Archives
Issue Tracking
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/

[SECURITY] Fedora 29 Update: drupal7-7.66-1.fc29 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://snyk.io/vuln/SNYK-JS-JQUERY-174006

Prototype Pollution in jquery | Snyk
Exploit;Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Page not found | Oracle
Patch;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73@%3Cissues.flink.apache.org%3E

[jira] [Updated] (FLINK-17675) Resolve CVE-2019-11358 from jquery - Pony Mail
Mailing List;Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html

Oracle Critical Patch Update Advisory - July 2020
Patch;Third Party Advisory

CVEs referencing this url
https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b

Core: Prevent Object.prototype pollution for $.extend( true, ... ) · jquery/jquery@753d591 · GitHub
Patch;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/

[SECURITY] Fedora 28 Update: drupal8-8.6.15-1.fc28 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3024

RHSA-2019:3024 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Oracle Critical Patch Update - July 2019
Patch;Third Party Advisory

CVEs referencing this url
https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1

2021-07 Security Bulletin: Junos OS: Multiple J-Web vulnerabilities resolved in Junos OS 21.2R1.
Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html

Oracle Critical Patch Update Advisory - July 2021
Patch;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734@%3Cdev.storm.apache.org%3E

Pony Mail!
Mailing List;Third Party Advisory
https://github.com/jquery/jquery/pull/4333

Core: Prevent Object.prototype pollution for $.extend( true, ... ) by mgol · Pull Request #4333 · jquery/jquery · GitHub
Patch;Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html

Oracle Critical Patch Update Advisory - January 2022
Patch;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355@%3Cdev.flink.apache.org%3E

[jira] [Created] (FLINK-17675) Resolve CVE-2019-11358 from jquery - Pony Mail
Mailing List;Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html

[SECURITY] [DLA 2118-1] otrs2 security update
Mailing List;Third Party Advisory
https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E

[GitHub] [airflow] XD-DENG commented on issue #5197: [AIRFLOW-XXX] Fix CVE-2019-11358-Apache Mail Archives
Issue Tracking
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E

[jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities - Pony Mail
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E

Dependencies used by Drill contain known vulnerabilities-Apache Mail Archives
Issue Tracking

CVEs referencing this url
https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc@%3Ccommits.airflow.apache.org%3E

[GitHub] [airflow] feng-tao commented on issue #5197: [AIRFLOW-XXX] Fix CVE-2019-11358 - Pony Mail
Mailing List;Third Party Advisory
https://www.tenable.com/security/tns-2019-08

[R1] Nessus Network Monitor 5.11.0 Fixes Multiple Third-party Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E

[jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities-Apache Mail Archives
Issue Tracking

CVEs referencing this url
https://www.tenable.com/security/tns-2020-02

[R1] Tenable.sc 5.14.0 Fixes Multiple Vulnerabilities - Security Advisory | Tenable®
Third Party Advisory

CVEs referencing this url
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601

Pulse Security Advisory: SA44601 - 2020-10: Security Bulletin: Multiple Vulnerabilities Resolved in Pulse Connect Secure / Pulse Policy Secure / Pulse Secure Desktop Client 9.1R9
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html

[security-announce] openSUSE-SU-2019:1872-1: moderate: Security update f
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/

[SECURITY] Fedora 29 Update: drupal8-8.6.15-1.fc29 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E

[jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities-Apache Mail Archives
Issue Tracking

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/

[SECURITY] Fedora 30 Update: drupal8-8.6.15-1.fc30 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E

Pony Mail!
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844@%3Ccommits.airflow.apache.org%3E

Pony Mail!
Mailing List;Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2587

RHSA-2019:2587 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d@%3Cissues.flink.apache.org%3E

Pony Mail!
Mailing List;Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html

Oracle Critical Patch Update Advisory - January 2021
Patch;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E

svn commit: r1869773 - /nifi/site/trunk/security.html-Apache Mail Archives
Issue Tracking

CVEs referencing this url
https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7@%3Ccommits.airflow.apache.org%3E

[GitHub] [airflow] codecov-io commented on issue #5197: [AIRFLOW-XXX] Fix CVE-2019-11358 - Pony Mail
Mailing List;Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html

[SECURITY] [DLA 1777-1] jquery security update
Mailing List;Third Party Advisory
https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E

[GitHub] [storm] Crim opened a new pull request #3305: [STORM-3553] Upgrade jQuery from 1.11.1 to 3.5.1-Apache Mail Archives
Issue Tracking
https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E

[jira] [Created] (ROL-2150) Fix Js security vulnerabilities detected using retire js-Apache Mail Archives
Issue Tracking

CVEs referencing this url
https://www.oracle.com/security-alerts/cpuApr2021.html

Oracle Critical Patch Update Advisory - April 2021
Patch;Third Party Advisory

CVEs referencing this url
https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/

jQuery 3.4.0 Released | Official jQuery Blog
Release Notes;Vendor Advisory
http://seclists.org/fulldisclosure/2019/May/13

Full Disclosure: Re: dotCMS v5.1.1 HTML Injection & XSS Vulnerability
Mailing List;Patch;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/108023

JQuery CVE-2019-11358 Cross Site Scripting Vulnerability
Broken Link;Third Party Advisory;VDB Entry
https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08@%3Cissues.flink.apache.org%3E

[jira] [Assigned] (FLINK-17675) Resolve CVE-2019-11358 from jquery - Pony Mail
Mailing List;Third Party Advisory
https://security.netapp.com/advisory/ntap-20190919-0001/

CVE-2019-11358 jQuery Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E

[jira] [Created] (FLINK-17675) Resolve CVE-2019-11358 from jquery-Apache Mail Archives
Issue Tracking
http://seclists.org/fulldisclosure/2019/May/10

Full Disclosure: dotCMS v5.1.1 Vulnerabilities
Mailing List;Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2019:1456

RHSA-2019:1456 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/

503 Backend fetch failed
Mailing List;Third Party Advisory
https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E

[jira] [Updated] (FLINK-17675) Resolve CVE-2019-11358 from jquery-Apache Mail Archives
Issue Tracking
http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html

RetireJS CORS Issue / Script Execution ≈ Packet Storm
Third Party Advisory;VDB Entry

CVEs referencing this url
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E

svn commit: r1869773 - /nifi/site/trunk/security.html - Pony Mail
Mailing List;Third Party Advisory

CVEs referencing this url
https://www.debian.org/security/2019/dsa-4460

Debian -- Security Information -- DSA-4460-1 mediawiki
Third Party Advisory

CVEs referencing this url
https://www.synology.com/security/advisory/Synology_SA_19_19

Synology Inc.
Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766@%3Cdev.syncope.apache.org%3E

Pony Mail!
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html

[security-announce] openSUSE-SU-2019:1839-1: moderate: Security update f
Mailing List;Third Party Advisory

CVEs referencing this url
https://www.oracle.com/security-alerts/cpuoct2021.html

Oracle Critical Patch Update Advisory - October 2021
Patch;Third Party Advisory

CVEs referencing this url
https://backdropcms.org/security/backdrop-sa-core-2019-009

Backdrop core - Moderately critical - Cross Site Scripting - SA-CORE-2019-009 | Backdrop CMS
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/03/2

oss-security - Django: CVE-2019-12308 AdminURLFieldWidget XSS (plus patched bundled jQuery for CVE-2019-11358)
Mailing List;Patch;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E

[jira] [Commented] (FLINK-17675) Resolve CVE-2019-11358 from jquery-Apache Mail Archives
Issue Tracking
https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E

[jira] [Created] (FLINK-17675) Resolve CVE-2019-11358 from jquery-Apache Mail Archives
Issue Tracking
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/

[SECURITY] Fedora 29 Update: drupal8-8.6.15-1.fc29 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/

[SECURITY] Fedora 29 Update: drupal7-7.66-1.fc29 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/

[SECURITY] Fedora 28 Update: drupal7-7.66-1.fc28 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E

[GitHub] [airflow] XD-DENG merged pull request #5197: [AIRFLOW-XXX] Fix CVE-2019-11358-Apache Mail Archives
Issue Tracking
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E

svn commit: r1873083 - /nifi/site/trunk/security.html - Pony Mail
Mailing List;Third Party Advisory

CVEs referencing this url
https://www.drupal.org/sa-core-2019-006

Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-006 | Drupal.org
Patch;Third Party Advisory
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E

svn commit: r1873083 - /nifi/site/trunk/security.html-Apache Mail Archives
Issue Tracking

CVEs referencing this url
https://access.redhat.com/errata/RHBA-2019:1570

RHBA-2019:1570 - Bug Fix Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E

[jira] [Closed] (FLINK-17675) Resolve CVE-2019-11358 from jquery-Apache Mail Archives
Issue Tracking
https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa@%3Cissues.flink.apache.org%3E

[jira] [Closed] (FLINK-17675) Resolve CVE-2019-11358 from jquery - Pony Mail
Mailing List;Third Party Advisory
https://seclists.org/bugtraq/2019/Apr/32

Bugtraq: [SECURITY] [DSA 4434-1] drupal7 security update
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/

[SECURITY] Fedora 30 Update: drupal8-8.6.15-1.fc30 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://seclists.org/bugtraq/2019/May/18

Bugtraq: dotCMS v5.1.1 Vulnerabilities
Mailing List;Patch;Third Party Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/

[SECURITY] Fedora 28 Update: drupal8-8.6.15-1.fc28 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3023

RHSA-2019:3023 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/

Mitigating CVE-2019-11358 in old versions of jQuery – PrivacyWise
Patch;Third Party Advisory
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E

[jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities - Pony Mail
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E

Jquery version on 2.1.x/2.0.x-Apache Mail Archives
Issue Tracking
https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9@%3Cissues.flink.apache.org%3E

[jira] [Commented] (FLINK-17675) Resolve CVE-2019-11358 from jquery - Pony Mail
Mailing List;Third Party Advisory
http://seclists.org/fulldisclosure/2019/May/11

Full Disclosure: dotCMS v5.1.1 HTML Injection & XSS Vulnerability
Mailing List;Patch;Third Party Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/

[SECURITY] Fedora 30 Update: drupal7-7.66-1.fc30 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://seclists.org/bugtraq/2019/Jun/12

Bugtraq: [SECURITY] [DSA 4460-1] mediawiki security update
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html

[SECURITY] [DLA 3551-1] otrs2 security update
Mailing List;Third Party Advisory

CVEs referencing this url