VDB
BDU%3A2020-05190
BDU%3A2020-05190
PUBLISHED
CVSS 6.400000095367432 MEDIUM
Уязвимость библиотеки jQuery, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
Risk Scores
CVSS 2.0
6.400000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Oracle Corp., ООО «РусБИТех-Астра», Novell Inc., Fedora Project, Red Hat Inc., The jQuery Foundation, АО "НППКТ", АО «НТЦ ИТ РОСА», АО «Концерн ВНИИНС», Moxa Inc. | Debian GNU/Linux, WebLogic Server, Retail Back Office, Retail Central Office, Retail Returns Management, PeopleSoft Enterprise PeopleTools, Astra Linux Special Edition (запись в едином реестре российских программ №369), WebCenter Sites, Oracle JDeveloper, Astra Linux Common Edition (запись в едином реестре российских программ №4433), Communications Application Session Controller, Communications Operations Monitor, OpenSUSE Leap, Application Testing Suite, Fedora, Insurance Allocation Manager for Enterprise Profitability, Hyperion Financial Repoting, Oracle Policy Automation Connector for Siebel, Astra Linux Special Edition для «Эльбрус» (запись в едином реестре российских программ №11156), PeopleSoft Enterprise HCM Human Resources, Oracle Hospitality Materials Control, Oracle Healthcare Foundation, Oracle Agile Product Lifecycle Management for Process, Oracle Financial Services Liquidity Risk Measurement and Management, Oracle Financial Services Market Risk Measurement and Management, Oracle Communications Element Manager, Oracle Communications Session Report Manager, Oracle Communications Session Route Manager, Oracle Banking Enterprise Collections, Primavera Gateway, Oracle Financial Services Liquidity Risk Management, Oracle Financial Services Hedge Management and IFRS Valuations, Financial Services Balance Sheet Planning, Oracle Financial Services Loan Loss Forecasting and Provisioning, Oracle Financial Services Asset Liability Management, Financial Services Profitability Management, Financial Services Funds Transfer Pricing, Financial Services Price Creation and Discovery, Openshift Service Mesh, Enterprise Manager Ops Center, Financial Services Analytical Applications Infrastructure, Oracle FLEXCUBE Private Banking, Communications Billing and Revenue Management, Oracle Communications Interactive Session Recorder, Communications Analytics, Communications Diameter Signaling Router, Oracle Banking Digital Experience, REST Data Services, Banking Platform, Communications WebRTC Session Controller, Oracle Hospitality Simphony, A-MQ Interconnect, Financial Services Institutional Performance Analytics, Insurance Insbridge Rating and Underwriting, jQuery, Oracle Enterprise Session Border Controller, Oracle Financial Services Analytical Applications Reconciliation Framework, Oracle Financial Services Basel Regulatory Capital Basic, Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach, Oracle Financial Services Data Foundation, Oracle Financial Services Data Integration Hub, Insurance Accounting An |
Timeline
- Nov 17, 2020 CVE Published
- Mar 19, 2025 CVE Updated
References
- http://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html url
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ url
- https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77 url
- https://jquery.com/upgrade-guide/3.5/ url
- https://nvd.nist.gov/vuln/detail/CVE-2020-11022 url
- https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16 url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://www.oracle.com/security-alerts/cpujul2020.html url
- https://www.suse.com/security/cve/CVE-2020-11022/ url
- https://wiki.astralinux.ru/pages/viewpage.action?pageId=47416144 url
- https://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17 url
- https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47 url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.1/ url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2760 url
- https://www.oracle.com/security-alerts/cpuoct2020.html advisory
- https://security-tracker.debian.org/tracker/CVE-2020-11022 advisory
- https://access.redhat.com/security/cve/cve-2020-11022 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B/ advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-244707-oncell-3120-lte-1-series-multiple-jquery-vulnerabilities advisory
…and 2 more