Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-11358

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.1, indicating it can be exploited remotely over the network with relatively low complexity though user interaction is required and does not require pre-existing privileges . The vulnerability impacts limited data confidentiality, limited integrity, for affected systems. Impacting 105 products from jquery, from debian, from drupal and 102 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2019, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.

Published

2019-04-20T00:29:00.247

Last Modified

2024-11-21T04:20:56.320

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-1321

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	jquery	jquery	< 3.4.0	Yes
Operating System	debian	debian_linux	8.0	Yes
Operating System	debian	debian_linux	9.0	Yes
Operating System	debian	debian_linux	10.0	Yes
Application	drupal	drupal	< 7.66	Yes
Application	drupal	drupal	< 8.5.15	Yes
Application	drupal	drupal	< 8.6.15	Yes
Application	backdropcms	backdrop	< 1.11.9	Yes
Application	backdropcms	backdrop	< 1.12.6	Yes
Operating System	fedoraproject	fedora	28	Yes
Operating System	fedoraproject	fedora	29	Yes
Operating System	fedoraproject	fedora	30	Yes
Application	opensuse	backports_sle	15.0	Yes
Operating System	opensuse	leap	15.1	Yes
Application	netapp	oncommand_system_manager	≤ 3.1.3	Yes
Application	netapp	snapcenter	-	Yes
Application	redhat	cloudforms	4.7	Yes
Application	redhat	virtualization_manager	4.3	Yes
Application	oracle	agile_product_lifecycle_management_for_process	6.1	Yes
Application	oracle	agile_product_lifecycle_management_for_process	6.2.0.0	Yes
Application	oracle	agile_product_lifecycle_management_for_process	6.2.1.0	Yes
Application	oracle	agile_product_lifecycle_management_for_process	6.2.2.0	Yes
Application	oracle	agile_product_lifecycle_management_for_process	6.2.3.0	Yes
Application	oracle	application_express	< 19.1	Yes
Application	oracle	application_service_level_management	13.2.0.0	Yes
Application	oracle	application_service_level_management	13.3.0.0	Yes
Application	oracle	application_testing_suite	12.5.0.3	Yes
Application	oracle	application_testing_suite	13.1.0.1	Yes
Application	oracle	application_testing_suite	13.2	Yes
Application	oracle	application_testing_suite	13.2.0.1	Yes
Application	oracle	application_testing_suite	13.3	Yes
Application	oracle	application_testing_suite	13.3.0.1	Yes
Application	oracle	banking_digital_experience	18.1	Yes
Application	oracle	banking_digital_experience	18.2	Yes
Application	oracle	banking_digital_experience	18.3	Yes
Application	oracle	banking_digital_experience	19.1	Yes
Application	oracle	banking_digital_experience	19.2	Yes
Application	oracle	banking_digital_experience	20.1	Yes
Application	oracle	banking_enterprise_collections	≤ 2.8.0	Yes
Application	oracle	banking_platform	≤ 2.10.0	Yes
Application	oracle	bi_publisher	5.5.0.0.0	Yes
Application	oracle	bi_publisher	12.2.1.3.0	Yes
Application	oracle	bi_publisher	12.2.1.4.0	Yes
Application	oracle	big_data_discovery	1.6	Yes
Application	oracle	business_process_management_suite	12.2.1.3.0	Yes
Application	oracle	business_process_management_suite	12.2.1.4.0	Yes
Application	oracle	communications_analytics	12.1.1	Yes
Application	oracle	communications_application_session_controller	3.8m0	Yes
Application	oracle	communications_billing_and_revenue_management	7.5	Yes
Application	oracle	communications_billing_and_revenue_management	7.5.0.23.0	Yes
Application	oracle	communications_billing_and_revenue_management	12.0	Yes
Application	oracle	communications_billing_and_revenue_management	12.0.0.3.0	Yes
Application	oracle	communications_diameter_signaling_router	8.0.0	Yes
Application	oracle	communications_diameter_signaling_router	8.1	Yes
Application	oracle	communications_diameter_signaling_router	8.2	Yes
Application	oracle	communications_diameter_signaling_router	8.2.1	Yes
Application	oracle	communications_eagle_application_processor	≤ 16.4.0	Yes
Application	oracle	communications_element_manager	8.1.1	Yes
Application	oracle	communications_element_manager	8.2.0	Yes
Application	oracle	communications_element_manager	8.2.1	Yes
Application	oracle	communications_interactive_session_recorder	≤ 6.4	Yes
Application	oracle	communications_operations_monitor	≤ 4.3	Yes
Application	oracle	communications_operations_monitor	3.4	Yes
Application	oracle	communications_operations_monitor	4.0	Yes
Application	oracle	communications_operations_monitor	4.1.0	Yes
Application	oracle	communications_services_gatekeeper	7.0	Yes
Application	oracle	communications_session_report_manager	8.1.1	Yes
Application	oracle	communications_session_report_manager	8.2.0	Yes
Application	oracle	communications_session_report_manager	8.2.1	Yes
Application	oracle	communications_session_route_manager	8.1.1	Yes
Application	oracle	communications_session_route_manager	8.2.0	Yes
Application	oracle	communications_session_route_manager	8.2.1	Yes
Application	oracle	communications_unified_inventory_management	7.3	Yes
Application	oracle	communications_unified_inventory_management	7.4.0	Yes
Application	oracle	communications_webrtc_session_controller	7.2	Yes
Application	oracle	diagnostic_assistant	2.12.36	Yes
Application	oracle	enterprise_manager_ops_center	12.3.3	Yes
Application	oracle	enterprise_manager_ops_center	12.4.0	Yes
Application	oracle	enterprise_manager_ops_center	12.4.0.0	Yes
Application	oracle	enterprise_session_border_controller	8.4	Yes
Application	oracle	financial_services_analytical_applications_infrastructure	≤ 7.3.5	Yes
Application	oracle	financial_services_analytical_applications_infrastructure	≤ 8.1.0	Yes
Application	oracle	financial_services_analytical_applications_reconciliation_framework	≤ 8.0.7	Yes
Application	oracle	financial_services_analytical_applications_reconciliation_framework	8.1.0	Yes
Application	oracle	financial_services_asset_liability_management	≤ 8.0.7	Yes
Application	oracle	financial_services_asset_liability_management	8.1.0	Yes
Application	oracle	financial_services_balance_sheet_planning	8.0.8	Yes
Application	oracle	financial_services_basel_regulatory_capital_basic	≤ 8.0.7	Yes
Application	oracle	financial_services_basel_regulatory_capital_basic	8.1.0	Yes
Application	oracle	financial_services_basel_regulatory_capital_internal_ratings_based_approach	≤ 8.0.7	Yes
Application	oracle	financial_services_basel_regulatory_capital_internal_ratings_based_approach	8.1.0	Yes
Application	oracle	financial_services_data_foundation	≤ 8.0.8	Yes
Application	oracle	financial_services_data_governance_for_us_regulatory_reporting	≤ 8.0.9	Yes
Application	oracle	financial_services_data_integration_hub	≤ 8.0.7	Yes
Application	oracle	financial_services_data_integration_hub	8.1.0	Yes
Application	oracle	financial_services_enterprise_financial_performance_analytics	8.0.6	Yes
Application	oracle	financial_services_enterprise_financial_performance_analytics	8.0.7	Yes
Application	oracle	financial_services_funds_transfer_pricing	≤ 8.0.7	Yes
Application	oracle	financial_services_funds_transfer_pricing	8.1.0	Yes
Application	oracle	financial_services_hedge_management_and_ifrs_valuations	≤ 8.0.7	Yes
Application	oracle	financial_services_hedge_management_and_ifrs_valuations	8.1.0	Yes
Application	oracle	financial_services_institutional_performance_analytics	≤ 8.0.7	Yes
Application	oracle	financial_services_institutional_performance_analytics	8.1.0	Yes
Application	oracle	financial_services_liquidity_risk_management	8.0.0.1.0	Yes
Application	oracle	financial_services_liquidity_risk_management	8.0.2	Yes
Application	oracle	financial_services_liquidity_risk_management	8.0.4.0.0	Yes
Application	oracle	financial_services_liquidity_risk_management	8.0.5.0.0	Yes
Application	oracle	financial_services_liquidity_risk_management	8.0.6	Yes
Application	oracle	financial_services_liquidity_risk_measurement_and_management	8.0.7	Yes
Application	oracle	financial_services_liquidity_risk_measurement_and_management	8.0.8	Yes
Application	oracle	financial_services_liquidity_risk_measurement_and_management	8.1.0	Yes
Application	oracle	financial_services_loan_loss_forecasting_and_provisioning	≤ 8.0.7	Yes
Application	oracle	financial_services_loan_loss_forecasting_and_provisioning	8.1.0	Yes
Application	oracle	financial_services_market_risk_measurement_and_management	8.0.5	Yes
Application	oracle	financial_services_market_risk_measurement_and_management	8.0.6	Yes
Application	oracle	financial_services_market_risk_measurement_and_management	8.0.8	Yes
Application	oracle	financial_services_price_creation_and_discovery	≤ 8.0.7	Yes
Application	oracle	financial_services_profitability_management	≤ 8.0.7	Yes
Application	oracle	financial_services_profitability_management	8.1.0	Yes
Application	oracle	financial_services_regulatory_reporting_for_de_nederlandsche_bank	8.0.4	Yes
Application	oracle	financial_services_regulatory_reporting_for_european_banking_authority	8.0.6	Yes
Application	oracle	financial_services_regulatory_reporting_for_european_banking_authority	8.0.7	Yes
Application	oracle	financial_services_regulatory_reporting_for_us_federal_reserve	≤ 8.0.7	Yes
Application	oracle	financial_services_retail_customer_analytics	≤ 8.0.6	Yes
Application	oracle	financial_services_retail_performance_analytics	8.0.6	Yes
Application	oracle	financial_services_retail_performance_analytics	8.0.7	Yes
Application	oracle	financial_services_revenue_management_and_billing	2.4.0.0	Yes
Application	oracle	financial_services_revenue_management_and_billing	2.4.0.1	Yes
Application	oracle	fusion_middleware_mapviewer	12.2.1.3.0	Yes
Application	oracle	healthcare_foundation	7.1.1	Yes
Application	oracle	healthcare_foundation	7.2.0	Yes
Application	oracle	healthcare_foundation	7.2.2	Yes
Application	oracle	healthcare_foundation	7.3.0	Yes
Application	oracle	healthcare_translational_research	3.1.0	Yes
Application	oracle	healthcare_translational_research	3.2.1	Yes
Application	oracle	healthcare_translational_research	3.3.1	Yes
Application	oracle	healthcare_translational_research	3.3.2	Yes
Application	oracle	healthcare_translational_research	3.4.0	Yes
Application	oracle	hospitality_guest_access	4.2.0	Yes
Application	oracle	hospitality_guest_access	4.2.1	Yes
Application	oracle	hospitality_materials_control	18.1	Yes
Application	oracle	hospitality_simphony	≤ 19.1.2	Yes
Application	oracle	hospitality_simphony	18.1	Yes
Application	oracle	hospitality_simphony	18.2	Yes
Application	oracle	identity_manager	12.2.1.3.0	Yes
Application	oracle	insurance_accounting_analyzer	8.0.9	Yes
Application	oracle	insurance_allocation_manager_for_enterprise_profitability	8.0.8	Yes
Application	oracle	insurance_allocation_manager_for_enterprise_profitability	8.1.0	Yes
Application	oracle	insurance_data_foundation	≤ 8.0.7	Yes
Application	oracle	insurance_ifrs_17_analyzer	8.0.6	Yes
Application	oracle	insurance_ifrs_17_analyzer	8.0.7	Yes
Application	oracle	insurance_insbridge_rating_and_underwriting	≤ 5.6.0.0	Yes
Application	oracle	insurance_insbridge_rating_and_underwriting	5.6.1.0	Yes
Application	oracle	insurance_performance_insight	8.0.7	Yes
Application	oracle	jd_edwards_enterpriseone_tools	9.2	Yes
Application	oracle	jdeveloper	11.1.1.9.0	Yes
Application	oracle	jdeveloper	12.2.1.3.0	Yes
Application	oracle	jdeveloper	12.2.1.4.0	Yes
Application	oracle	jdeveloper_and_adf	11.1.1.9.0	Yes
Application	oracle	jdeveloper_and_adf	12.1.3.0.0	Yes
Application	oracle	jdeveloper_and_adf	12.2.1.3.0	Yes
Application	oracle	knowledge	≤ 8.6.3	Yes
Application	oracle	peoplesoft_enterprise_peopletools	8.55	Yes
Application	oracle	peoplesoft_enterprise_peopletools	8.56	Yes
Application	oracle	peoplesoft_enterprise_peopletools	8.57	Yes
Application	oracle	peoplesoft_enterprise_peopletools	8.58	Yes
Application	oracle	policy_automation	≤ 12.2.15	Yes
Application	oracle	policy_automation	10.4.7	Yes
Application	oracle	policy_automation	12.1.0	Yes
Application	oracle	policy_automation	12.1.1	Yes
Application	oracle	policy_automation_connector_for_siebel	10.4.6	Yes
Application	oracle	policy_automation_for_mobile_devices	≤ 12.2.15	Yes
Application	oracle	primavera_gateway	≤ 16.2.11	Yes
Application	oracle	primavera_gateway	≤ 17.12.7	Yes
Application	oracle	primavera_gateway	≤ 18.8.9	Yes
Application	oracle	primavera_gateway	≤ 19.12.4	Yes
Application	oracle	primavera_gateway	15.2.18	Yes
Application	oracle	primavera_unifier	≤ 17.12	Yes
Application	oracle	primavera_unifier	16.1	Yes
Application	oracle	primavera_unifier	16.2	Yes
Application	oracle	primavera_unifier	18.8	Yes
Application	oracle	real-time_scheduler	≤ 2.3.0.3	Yes
Application	oracle	rest_data_services	11.2.0.4	Yes
Application	oracle	rest_data_services	12.1.0.2	Yes
Application	oracle	rest_data_services	12.2.0.1	Yes
Application	oracle	rest_data_services	18c	Yes
Application	oracle	rest_data_services	19c	Yes
Application	oracle	retail_back_office	14.0	Yes
Application	oracle	retail_back_office	14.1	Yes
Application	oracle	retail_central_office	14.0	Yes
Application	oracle	retail_central_office	14.1	Yes
Application	oracle	retail_customer_insights	15.0	Yes
Application	oracle	retail_customer_insights	16.0	Yes
Application	oracle	retail_customer_management_and_segmentation_foundation	18.0	Yes
Application	oracle	retail_customer_management_and_segmentation_foundation	19.0	Yes
Application	oracle	retail_point-of-service	14.0	Yes
Application	oracle	retail_point-of-service	14.1	Yes
Application	oracle	retail_returns_management	14.0	Yes
Application	oracle	retail_returns_management	14.1	Yes
Application	oracle	service_bus	11.1.1.9.0	Yes
Application	oracle	service_bus	12.1.3.0.0	Yes
Application	oracle	service_bus	12.2.1.3.0	Yes
Application	oracle	siebel_mobile_applications	≤ 19.8	Yes
Application	oracle	siebel_ui_framework	20.8	Yes
Application	oracle	storagetek_tape_analytics_sw_tool	2.3.0	Yes
Application	oracle	system_utilities	19.1	Yes
Application	oracle	tape_library_acsls	8.5	Yes
Application	oracle	tape_library_acsls	8.5.1	Yes
Application	oracle	transportation_management	1.4.3	Yes
Application	oracle	utilities_mobile_workforce_management	≤ 2.3.0.3	Yes
Application	oracle	webcenter_sites	12.2.1.3.0	Yes
Application	oracle	weblogic_server	10.3.6.0.0	Yes
Application	oracle	weblogic_server	12.1.3.0.0	Yes
Application	oracle	weblogic_server	12.2.1.3.0	Yes
Application	oracle	weblogic_server	12.2.1.4.0	Yes
Application	oracle	weblogic_server	14.1.1.0.0	Yes
Application	joomla	joomla\!	≤ 3.9.4	Yes
Operating System	juniper	junos	21.2	Yes

References

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html Mailing List, Third Party Advisory ([email protected])
http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html Third Party Advisory, VDB Entry ([email protected])
http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html Third Party Advisory, VDB Entry ([email protected])
http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html Third Party Advisory, VDB Entry ([email protected])
http://seclists.org/fulldisclosure/2019/May/10 Mailing List, Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2019/May/11 Mailing List, Patch, Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2019/May/13 Mailing List, Patch, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2019/06/03/2 Mailing List, Patch, Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/108023 Broken Link, Third Party Advisory, VDB Entry ([email protected])
https://access.redhat.com/errata/RHBA-2019:1570 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2019:1456 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2019:2587 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2019:3023 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2019:3024 Third Party Advisory ([email protected])
https://backdropcms.org/security/backdrop-sa-core-2019-009 Third Party Advisory ([email protected])
https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/ Release Notes, Vendor Advisory ([email protected])
https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b Patch, Third Party Advisory ([email protected])
https://github.com/jquery/jquery/pull/4333 Patch, Third Party Advisory ([email protected])
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601 Third Party Advisory ([email protected])
https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E Issue Tracking ([email protected])
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E Issue Tracking ([email protected])
https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html Mailing List, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html Mailing List, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html Mailing List, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html Mailing List, Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/ Mailing List, Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/ Mailing List, Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/ Mailing List, Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/ Mailing List, Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/ Mailing List, Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/ Mailing List, Third Party Advisory ([email protected])
https://seclists.org/bugtraq/2019/Apr/32 Mailing List, Third Party Advisory ([email protected])
https://seclists.org/bugtraq/2019/Jun/12 Issue Tracking, Mailing List, Third Party Advisory ([email protected])
https://seclists.org/bugtraq/2019/May/18 Mailing List, Patch, Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20190919-0001/ Third Party Advisory ([email protected])
https://snyk.io/vuln/SNYK-JS-JQUERY-174006 Exploit, Third Party Advisory ([email protected])
https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1 Third Party Advisory ([email protected])
https://www.debian.org/security/2019/dsa-4434 Third Party Advisory ([email protected])
https://www.debian.org/security/2019/dsa-4460 Third Party Advisory ([email protected])
https://www.drupal.org/sa-core-2019-006 Patch, Third Party Advisory ([email protected])
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/security-alerts/cpujan2020.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/security-alerts/cpujul2020.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch, Third Party Advisory ([email protected])
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch, Third Party Advisory ([email protected])
https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/ Patch, Third Party Advisory ([email protected])
https://www.synology.com/security/advisory/Synology_SA_19_19 Third Party Advisory ([email protected])
https://www.tenable.com/security/tns-2019-08 Third Party Advisory ([email protected])
https://www.tenable.com/security/tns-2020-02 Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2019/May/10 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2019/May/11 Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2019/May/13 Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2019/06/03/2 Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/108023 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHBA-2019:1570 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2019:1456 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2019:2587 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2019:3023 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2019:3024 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://backdropcms.org/security/backdrop-sa-core-2019-009 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/ Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/jquery/jquery/pull/4333 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://seclists.org/bugtraq/2019/Apr/32 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://seclists.org/bugtraq/2019/Jun/12 Issue Tracking, Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://seclists.org/bugtraq/2019/May/18 Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20190919-0001/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://snyk.io/vuln/SNYK-JS-JQUERY-174006 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2019/dsa-4434 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2019/dsa-4460 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.drupal.org/sa-core-2019-006 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpujan2020.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpujul2020.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/ Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.synology.com/security/advisory/Synology_SA_19_19 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.tenable.com/security/tns-2019-08 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.tenable.com/security/tns-2020-02 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For jquery's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.